mews
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned, and the CLI install comes from an official registry rather than an obviously malicious source. However, all authentication and API traffic are funneled through Membrane’s intermediary platform instead of going directly to Mews, creating a meaningful third-party credential/data-trust concern for a business-system integration with potentially sensitive reservation and payment operations.
Confidence: 84%Severity: 61%
Audit Metadata