1s2u

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is reasonably legitimate and same-vendor, so this does not look like outright malware. However, the skill's actual data flow routes 1S2U access through Membrane as an intermediary service and broad proxy, which is a notable trust and data-handling expansion beyond a direct 1S2U integration.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 28, 2026, 05:26 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2F1s2u%2F@6e44529da4a59dc4e7ff1e6c9c0e78d291a7d843
Security Audit — socket — 1s2u