timetastic
Warn
Audited by Socket on May 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install path is reasonably legitimate, but the skill's actual footprint is a Membrane integration more than a direct Timetastic integration: authentication, action generation, and data access are all mediated by Membrane. That third-party gateway model makes data flow and credential handling broader than the stated Timetastic purpose and raises medium security risk.
Confidence: 83%Severity: 64%
Audit Metadata