serwersmspl
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent in purpose and uses an official npm-distributed CLI from the same vendor, so it is not overtly malicious. However, all authentication, credentials, and SerwerSMS operations are funneled through Membrane as a third-party intermediary instead of the official SerwerSMS API, which creates medium trust and data-flow risk for a skill presented as a SerwerSMS integration.
Confidence: 86%Severity: 56%
Audit Metadata