kartra

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities broadly match its stated Kartra-integration purpose, and the CLI install source appears legitimate. The main concern is architectural: Kartra credentials and API traffic are routed through Membrane’s managed service/proxy, which is disclosed but introduces third-party credential/data handling and broad write capability.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 15, 2026, 07:25 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fkartra%2F@0b2761fab96d0d0d1983eb3445d9572f38e12eda