pointerpro
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s general purpose matches a Pointerpro integration, and the CLI install path is reasonably legitimate via npm. However, the core data flow routes authentication and API traffic through Membrane as an intermediary proxy rather than directly to Pointerpro, which is a meaningful trust and data-handling expansion for this skill.
Confidence: 86%Severity: 58%
Audit Metadata