iris-cascade

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is broadly consistent with its stated purpose as a Membrane-published IRIS integration, and the CLI comes from an official registry. However, it routes authentication and all IRIS operations through Membrane as an intermediary, creating notable credential/data-access and real-world action risk that is disproportionate to a simple vendor integration guide.

Confidence: 85%Severity: 61%
Audit Metadata
Analyzed At
Apr 21, 2026, 10:31 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Firis-cascade%2F@0b53541c9b63aa3ada1768cb28d12268cee771e5