zitadel

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is coherent and the installer appears official, but the actual integration is not direct ZITADEL access. It requires a third-party CLI and routes authentication and API traffic through Membrane as an intermediary, which is a meaningful data-flow and trust expansion beyond a simple vendor API skill.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 15, 2026, 03:55 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzitadel%2F@0fe1e2b528d0eb722072dcbb52d2300b526aa72245a72570a6039a2f126d1316
Security Audit — socket — zitadel