youtube-analytics

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose matches YouTube Analytics usage, and the CLI install source is reasonably legitimate, but authenticated API access is routed through Membrane’s intermediary service rather than directly to Google. That third-party credential and data brokering is the main risk; it is not clearly malicious, but it is broader trust than the stated YouTube-only purpose implies.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Apr 30, 2026, 12:07 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fyoutube-analytics%2F@1f05b240349d8ad43f8c3e09205b3b04846772a7