skills/faberlens/hardened-skills/semgrep-hardened/Socket

semgrep-hardened

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose is coherent, and the Membrane CLI appears to be officially distributed, but the integration routes Semgrep authentication and data through Membrane rather than directly to Semgrep. That intermediary data flow and credential delegation are disproportionate enough to warrant medium risk, especially given support for destructive admin actions.

Confidence: 86%Severity: 62%

Audit Metadata

Analyzed At

Apr 21, 2026, 06:36 PM

Package URL

pkg:socket/skills-sh/faberlens%2Fhardened-skills%2Fsemgrep-hardened%2F@62b310e29b132939b5f1152cb42429049c5bba4a