mamo-business
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is not overtly malicious and uses an official npm-distributed CLI, but its actual footprint is broader than a direct Mamo Business integration. It requires a Membrane account, routes authentication and API traffic through Membrane, and encourages proxy-based access instead of direct Mamo API use, creating a third-party credential and data mediation risk.
Confidence: 86%Severity: 58%
Audit Metadata