skills/membranedev/application-skills/treblle/Socket

treblle

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's capabilities broadly match its stated Treblle purpose, and the CLI install source appears legitimate, but the real integration is a Membrane-mediated proxy rather than direct Treblle access. That third-party credential and data routing is disclosed yet materially expands trust and creates medium security risk.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Apr 2, 2026, 10:48 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftreblle%2F@173c0ef4a690b1c91fe98286d22aa83bbee6e064