tomtom

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's install path is mostly coherent and same-org, but its actual footprint is a Membrane-mediated integration rather than a direct TomTom one. Requiring a Membrane account and routing TomTom authentication/API traffic through Membrane is a meaningful data-flow and trust expansion beyond what a straightforward TomTom skill would normally need.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Apr 2, 2026, 09:59 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftomtom%2F@1ccb21873be8a35ed5986a5caa7e28207e41f261