breathe
Warn
Audited by Socket on Apr 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's core behavior mostly matches its stated purpose as a Membrane-based Breathe integration, and the CLI install path is consistent with the publisher. However, all Breathe access is routed through Membrane as a third-party intermediary, and the documentation contains a clearly incorrect official-docs link plus some overstated claims about secret handling. This is not fundamentally incompatible with the skill's purpose, but the indirect credential/data flow and documentation inconsistency raise medium trust concerns.
Confidence: 89%Severity: 56%
Audit Metadata