pointerpro

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s general purpose matches a Pointerpro integration, and the CLI install path is reasonably legitimate via npm. However, the core data flow routes authentication and API traffic through Membrane as an intermediary proxy rather than directly to Pointerpro, which is a meaningful trust and data-handling expansion for this skill.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Mar 13, 2026, 11:55 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fpointerpro%2F@e2985a014d8c15fc2ea565ae6d333f53eb88596c