testrail

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose matches TestRail operations, and the CLI install path appears same-org and official, but the actual integration is mediated by Membrane at every step. Credentials, connection state, API requests, and returned TestRail data flow through a third-party service rather than directly to TestRail, which is a material data-flow and trust expansion for a TestRail skill.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:44 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftestrail%2F@838cb4717970fe31f4d6aa56936ee3b960d52bf5