amadeus

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install source appears legitimate and same-vendor, so this is not confirmed malware. However, the skill's true footprint is a Membrane integration layer that intermediates Amadeus access, credentials, and data flows through a third party rather than official Amadeus APIs, creating medium security risk and a clear purpose/data-flow mismatch.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 03:19 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Famadeus%2F@725572707703da02ae59b2a2681f85d33f0efd87