uk-gov-vehicle-enquiry-api
Warn
Audited by Socket on May 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s general function matches vehicle-enquiry use, and the CLI comes from an official npm package rather than an obvious malware source. However, the integration is materially proxy-based: authentication, connections, and API actions are routed through Membrane instead of the official DVLA API, creating third-party credential/data exposure and a scope mismatch with the plain-language description of a UK gov API integration.
Confidence: 85%Severity: 58%
Audit Metadata