fatture-in-cloud

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, and the npm-installed CLI appears to be an official Membrane tool. However, all authentication and API traffic are routed through Membrane rather than directly to Fatture in Cloud, creating a third-party intermediary for financial data and credentials. This is disclosed and may be legitimate for the platform, but it raises medium trust and data-flow risk compared with a direct official API integration.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 24, 2026, 05:11 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffatture-in-cloud%2F@2b2a75e2bb5c155301e30540e31c6e3ceac402bc