chaser

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s overall purpose is coherent, and the CLI install path appears legitimate via official npm/docs, so this is not malware-like. However, the integration is built around Membrane as an intermediary for authentication, credential refresh, and API proxying instead of direct Chaser API use, which creates moderate trust and data-flow risk beyond a simple direct-service integration.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Mar 14, 2026, 04:24 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fchaser%2F@17939d49982f11dffdd43e75c66cc6e02cb79467