Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities broadly match its WhatsApp integration purpose, and the CLI install path is same-vendor and registry-based rather than a raw payload. The main concern is data-flow integrity: WhatsApp authentication and API traffic are mediated by Membrane, including a generic proxy path and possible auto-built connectors, so the trust footprint is broader than a direct first-party API integration.
Confidence: 85%Severity: 62%
Audit Metadata