breathe

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's core behavior mostly matches its stated purpose as a Membrane-based Breathe integration, and the CLI install path is consistent with the publisher. However, all Breathe access is routed through Membrane as a third-party intermediary, and the documentation contains a clearly incorrect official-docs link plus some overstated claims about secret handling. This is not fundamentally incompatible with the skill's purpose, but the indirect credential/data flow and documentation inconsistency raise medium trust concerns.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
Apr 2, 2026, 01:41 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbreathe%2F@931a294321945b101ea49a5523c0b7948e97d74f