mackerel

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, and the CLI comes from a normal npm source, but the core design routes Mackerel access and effective credentials through Membrane's intermediary platform rather than directly to Mackerel's official API. That makes this a coherent integration with moderate security/privacy risk, not clear malware.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Apr 24, 2026, 04:28 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmackerel%2F@69f25d7b2173906496a02aa9959c29bd1fe54473