whoisfreaks
Warn
Audited by Socket on Apr 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is coherent, and the Membrane CLI appears to be an official npm-distributed tool, so this is not malware-like. However, the integration routes authentication and WhoisFreaks API traffic through Membrane as an intermediary, expanding trust and data exposure beyond a direct official API integration. Risk is moderate due to credential/data forwarding and proxy-based access, not because of malicious behavior.
Confidence: 87%Severity: 52%
Audit Metadata