fatture-in-cloud
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's purpose and capabilities mostly align, and the npm-installed CLI appears to be an official Membrane tool. However, all authentication and API traffic are routed through Membrane rather than directly to Fatture in Cloud, creating a third-party intermediary for financial data and credentials. This is disclosed and may be legitimate for the platform, but it raises medium trust and data-flow risk compared with a direct official API integration.
Confidence: 87%Severity: 56%
Audit Metadata