tito
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is Tito access, but its actual footprint depends on Membrane as a third-party intermediary for authentication, action execution, and data transit. The npm install source is relatively credible, yet the indirect data flow and delegated credential handling are broader than a direct Tito integration and raise medium risk.
Confidence: 84%Severity: 58%
Audit Metadata