assetsonar
Warn
Audited by Socket on Mar 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Benign overall. The skill fragment presents a legitimate AssetSonar integration flow using Membrane’s CLI and proxy mechanism, with credentials managed server-side and no hardcoded secrets or questionable download patterns. Security risk is moderate due to external service interactions but aligns with the intended supply-chain integration pattern.
Confidence: 75%Severity: 75%
Audit Metadata