whoisfreaks

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, and the Membrane CLI appears to be an official npm-distributed tool, so this is not malware-like. However, the integration routes authentication and WhoisFreaks API traffic through Membrane as an intermediary, expanding trust and data exposure beyond a direct official API integration. Risk is moderate due to credential/data forwarding and proxy-based access, not because of malicious behavior.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Apr 2, 2026, 02:44 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwhoisfreaks%2F@96123bb1b6303e9d6ba7d0462f569711bdf4ec7d