skills/membranedev/application-skills/logit-io/Socket

logit-io

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is not overt malware and uses an official npm-distributed CLI from the same vendor ecosystem, but its real integration point is Membrane, not Logit.io. That third-party mediation of authentication and data is disclosed yet materially changes the trust boundary, and the mutable @latest CLI execution adds moderate supply-chain risk.

Confidence: 85%Severity: 57%

Audit Metadata

Analyzed At

Apr 21, 2026, 10:32 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flogit-io%2F@390c20edafafc8cde80d980273acf7fddd6167f9