chartmogul
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities broadly match its stated ChartMogul integration purpose, and the CLI install path appears to be an official npm-distributed tool rather than a hidden payload. The main concern is data-flow integrity: all authentication and API access are funneled through Membrane as a third-party intermediary instead of directly to ChartMogul, which is proportionate to the product design but increases exposure of account data and control to another service.
Confidence: 85%Severity: 52%
Audit Metadata