stormglassio

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Stormglass.io Membrane integration appears coherently scoped to its stated purpose: a legitimate data-access integration using Membrane's authenticated proxy flow to Stormglass.io. It relies on official registries for installation and keeps credentials within Membrane’s OAuth/auth lifecycle, minimizing exposure. No suspicious data exfiltration or covert credential forwarding is evident. Overall, the footprint is benign and proportionate for a developer-focused integration, with low-to-moderate security risk primarily due to standard API integration concerns.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 08:32 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fstormglassio%2F@989ee3f312827f050cdc632fb2d817156453af79