timetastic

Warn

Audited by Socket on May 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is reasonably legitimate, but the skill's actual footprint is a Membrane integration more than a direct Timetastic integration: authentication, action generation, and data access are all mediated by Membrane. That third-party gateway model makes data flow and credential handling broader than the stated Timetastic purpose and raises medium security risk.

Confidence: 83%Severity: 64%
Audit Metadata
Analyzed At
May 8, 2026, 06:42 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftimetastic%2F@c6ffcfd9a41b0fb209632dfdbb45e875a42438c7
Security Audit — socket — timetastic