llamaindex

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally coherent as a Membrane-based LlamaIndex integration, and its CLI install path is low-risk and verifiably official. However, it is not a direct LlamaIndex integration: authentication and API traffic are routed through Membrane, a third-party intermediary, which creates meaningful data-flow and trust-expansion risk beyond what the title alone may imply.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Apr 21, 2026, 08:35 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fllamaindex%2F@7e793c336217309deae5ae1d4588b74a1ce220ec