nango

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill presents a coherent, low-risk integration helper: it delegates authentication and credential management to Membrane, uses an official CLI install, and channels all API interactions through Membrane’s proxy. This aligns with its stated purpose of enabling Nango interactions via Membrane without exposing credentials locally. No obvious malicious data flow or over-privileged access is apparent. Overall assessment: benign with low to moderate security risk due to the reliance on a trusted proxy and standard package sources.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 04:17 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fnango%2F@38b9f902f32cee6ab4366d49dc62cc7fd5b48b90