zerotier

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally coherent as a Membrane-based ZeroTier integration, and the CLI install source is legitimate npm rather than an unverifiable binary. However, all ZeroTier access and credential handling are routed through Membrane instead of official ZeroTier APIs, creating a third-party credential/data mediation layer that is broader than a direct service integration.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
May 6, 2026, 04:45 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzerotier%2F@2d1071743825b850ab89d4c328f77fc511ce7c0f
Security Audit — socket — zerotier