alchemy

Warn

Audited by Socket on Mar 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill fragment presents a coherent, purpose-aligned integration documentation for using the Membrane CLI to interact with Alchemy data. It relies on standard, trusted distribution and authentication flows (npm CLI installation, browser-based login via Membrane, proxying through Membrane). There are no evident malicious patterns, hardcoded secrets, or suspicious data flows. Overall, the footprint is proportionate to its stated purpose, with moderate security risk mainly tied to reliance on third-party CLI and external services, which is expected for this kind of integration.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 4, 2026, 08:56 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Falchemy%2F@df0a4a80105797f3841e0c8475730654dc1be760