chatsonic
Warn
Audited by Socket on Mar 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent in purpose and uses an official npm-distributed Membrane CLI, but it routes Chatsonic authentication and API traffic through Membrane rather than directly to Writesonic. That third-party credential and data brokerage is proportionally riskier than a direct API integration, though not clear evidence of malware.
Confidence: 84%Severity: 56%
Audit Metadata