gosquared
Warn
Audited by Socket on Apr 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose and capabilities mostly align, and the CLI install source appears legitimate and same-ecosystem. The main concern is data-flow integrity: GoSquared access is mediated through Membrane's CLI/proxy rather than direct official API calls, expanding trust to a third party that handles authentication and request forwarding. This is not clearly malicious, but it creates medium risk due to credential centralization and intermediary network routing.
Confidence: 86%Severity: 54%
Audit Metadata