skills/membranedev/application-skills/marketstack/Socket

marketstack

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based connector, but it is not a direct Marketstack integration. Its main risk is data-flow and credential mediation through Membrane rather than official Marketstack APIs; install trust is relatively low risk because the CLI comes from the official npm registry and appears vendor-aligned.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Apr 25, 2026, 09:37 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmarketstack%2F@083c6bee308e9578d197c1790b05d6d4a0c6abc9