accountscore

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose is AccountScore access, but it actually requires routing authentication and data through Membrane's CLI and backend rather than AccountScore's official API surface. The install source is reasonably legitimate and same-vendor, so this is not confirmed malware, but the third-party mediation, mutable CLI versioning, and expanded data trust boundary make the skill medium risk.

Confidence: 83%Severity: 54%
Audit Metadata
Analyzed At
May 1, 2026, 07:26 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Faccountscore%2F@35ec5efd6edf7b1fa0ac10151e94242684bcd0e9
Security Audit — socket — accountscore