journeyfront

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's overall purpose is coherent, and the CLI source appears legitimate, but the integration routes authentication and Journeyfront API traffic through Membrane as an intermediary instead of direct official endpoints. That third-party credential/data handling and broad proxy capability make the skill medium risk rather than benign.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Apr 24, 2026, 07:50 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fjourneyfront%2F@fef2ad36f01c522b6cfc8ddea9cfd736f4f76daf