akismet

Warn

Audited by Socket on Mar 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill fragment is coherently aligned with its stated purpose of enabling Akismet integration via Membrane. It uses official tooling and a credential-management paradigm that minimizes local secret handling. There are no evident malicious code patterns, no hardcoded secrets, and no suspicious download/execution chains. Overall security posture is Benign with Medium risk due to reliance on an external service (Membrane) for authentication and proxying data to Akismet; risk could be elevated if Membrane is compromised or misconfigured, but nothing in the fragment indicates malicious intent or data exfiltration beyond legitimate API usage.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 4, 2026, 08:56 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fakismet%2F@94283bf7f63e959126ac5f01e3f72ab25084b032