servicem8
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose broadly matches ServiceM8 access, but the actual integration is mediated through Membrane rather than direct ServiceM8 APIs. That third-party routing is proportionate to the stated Membrane-based design, yet it expands trust and data exposure beyond a pure ServiceM8 skill. Install trust is moderate due to an official npm package, but use of an unpinned external CLI and intermediary platform keeps risk above benign.
Confidence: 85%Severity: 56%
Audit Metadata