travelport

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is coherent in function, and the CLI install source appears official and documented, so this is not malware-like. But it is not a direct Travelport integration; it routes authentication and operations through Membrane as a third-party intermediary, which creates medium security risk and a data-flow mismatch from the implied Travelport-only purpose.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 28, 2026, 03:59 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftravelport%2F@65bb8a9a025bae07624ba6d246179038fe2f1683