tastyigniter

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, and the CLI comes from an official package registry with publisher evidence pointing to the same Membrane ecosystem. However, all TastyIgniter access is mediated through Membrane rather than direct official APIs, so credentials and business data are entrusted to a third-party platform and CLI. This is disclosed and plausibly legitimate, but it increases trust and data-flow risk beyond a simple direct integration.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 3, 2026, 04:34 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftastyigniter%2F@07160ec02858e3465069abc7e43083a577db778f
Security Audit — socket — tastyigniter