talend

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's capabilities broadly match Talend integration, and the CLI install path is official and coherent, but the actual data flow is through Membrane as an intermediary rather than directly to Talend. That makes credential handling and API traffic broader than the stated Talend-only purpose, raising medium risk without clear evidence of malware.

Confidence: 86%Severity: 54%
Audit Metadata
Analyzed At
Apr 2, 2026, 03:13 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftalend%2F@87e8b7feb0af9cddb9219f9d61a398e4db75a72f