terminus-app
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the install path is coherent and vendor-consistent, but the skill's actual data flow routes Terminus authentication and API traffic through Membrane infrastructure instead of directly to Terminus. This is not confirmed malware, but it introduces meaningful third-party credential and data handling risk that is broader than a simple Terminus connector.
Confidence: 85%Severity: 58%
Audit Metadata