simpletexting
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is mostly coherent with its stated purpose and uses an official npm-distributed Membrane CLI, so it does not look overtly malicious. However, it routes authentication and SimpleTexting operations through Membrane as an intermediary, uses a mutable global CLI install, and enables real-world messaging actions; that makes the trust footprint broader than a direct SimpleTexting integration and raises medium security concerns.
Confidence: 84%Severity: 58%
Audit Metadata