zeit

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities broadly match its stated purpose, and the CLI distribution path is consistent with the publisher. The main concern is data-flow integrity: ZEIT/Vercel API access and credential handling are mediated by Membrane rather than going directly to official Vercel endpoints, so users must trust a third-party auth broker and proxy with sensitive operational data.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 2, 2026, 03:13 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzeit%2F@010b3eb849382a886930f5733f567c169a7b3cc9