affinity

Warn

Audited by Socket on Mar 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill fragment presents a coherent, purpose-aligned integration for Affinity via the Membrane CLI. It avoids embedding secrets, uses a centralized auth model, and confines API interactions to Membrane-provided actions or proxy calls. There are no evident malicious patterns, no suspicious external downloads beyond the official Membrane CLI, and data flows are consistent with the stated purpose of secure, credential-protected access to Affinity data.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 4, 2026, 08:56 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Faffinity%2F@3890978bdbb865f8a2a6bddaaadbe2bb7c319282