translatecom

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose broadly matches its capabilities, and the CLI source is consistent with the publisher via official npm/docs. However, the integration routes Translate.com access and credentials through Membrane as a third-party intermediary, with broad proxy capabilities and unpinned `npx @latest` usage, so the overall risk is medium rather than benign.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
Apr 22, 2026, 05:04 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftranslatecom%2F@efec07cc9f705f8739699ff9c6bd8b6720df6c8b