ragic

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities mostly align, and the CLI comes from an official npm package with documented install steps. However, the integration routes authentication and Ragic API traffic through Membrane as an intermediary, so credentials and business data do not flow directly to official Ragic endpoints; this is proportionate but creates a meaningful third-party trust and data-flow risk.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Mar 24, 2026, 05:08 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fragic%2F@b03d4cb125b0480333cddbc51478bfd3540be8ba