iris-cascade
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is broadly consistent with its stated purpose as a Membrane-published IRIS integration, and the CLI comes from an official registry. However, it routes authentication and all IRIS operations through Membrane as an intermediary, creating notable credential/data-access and real-world action risk that is disproportionate to a simple vendor integration guide.
Confidence: 85%Severity: 61%
Audit Metadata