timing
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's general purpose matches a Timing integration, and its install path is an official npm package rather than an unverifiable payload. However, it unnecessarily routes authentication and API access through Membrane instead of Timing's first-party API/MCP path, creating a third-party credential and data mediation layer that is disproportionate to a straightforward Timing skill.
Confidence: 88%Severity: 58%
Audit Metadata