verdict-as-a-service
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is coherent as a Membrane-based integration, and the CLI install path is official npm rather than an unverifiable binary. The main concern is data-flow integrity: despite claiming to work with Verdict as a Service, it routes authentication and API access through Membrane's intermediary platform and proxy instead of direct official service endpoints, expanding trust and exposure beyond a narrow first-party integration.
Confidence: 86%Severity: 58%
Audit Metadata