terminus-app

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install path is coherent and vendor-consistent, but the skill's actual data flow routes Terminus authentication and API traffic through Membrane infrastructure instead of directly to Terminus. This is not confirmed malware, but it introduces meaningful third-party credential and data handling risk that is broader than a simple Terminus connector.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Apr 21, 2026, 10:29 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fterminus-app%2F@4bce9df18451d4671fb13fdf73ec97b5bc8cd48d