mezmo

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install source is relatively trustworthy, but the skill’s core design routes Mezmo authentication and data through Membrane as a third-party intermediary rather than official Mezmo APIs. That makes the footprint only partially aligned with the stated purpose and raises medium security risk, though there is no strong evidence of outright malware.

Confidence: 85%Severity: 63%
Audit Metadata
Analyzed At
Apr 21, 2026, 09:35 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmezmo%2F@542c3a946b8a091f156694645d6e49cd42ba11ca