fidel-api

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with Fidel API integration, and its CLI install path appears to be legitimate same-publisher tooling from npm. However, it shifts authentication and API traffic through Membrane as an intermediary, including proxy requests, which creates a nontrivial third-party credential/data handling risk that is larger than a direct Fidel integration.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Apr 25, 2026, 02:32 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffidel-api%2F@1febbed8dfe4f64909903e618739bdb55a2f7868