tito

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is Tito access, but its actual footprint depends on Membrane as a third-party intermediary for authentication, action execution, and data transit. The npm install source is relatively credible, yet the indirect data flow and delegated credential handling are broader than a direct Tito integration and raise medium risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 1, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftito%2F@c9db2ac471c8d274dfbee5fbe0426b2184aaff88
Security Audit — socket — tito