metabase

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is coherent in function, but it is not a direct Metabase integration; it proxies authentication and all actions through Membrane. Install source appears legitimate and same-vendor, so this is not malware-like, but the intermediary credential/data flow and mutable CLI install create medium security risk relative to the stated purpose.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Apr 22, 2026, 03:38 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmetabase%2F@63cf2db6739b163a4f7e1c6f76a7796118138086