agile-crm

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities fit Agile CRM management, and the install path is an official npm package rather than an obvious malware loader. The main concern is data-flow integrity: instead of calling Agile CRM directly, the skill requires a third-party intermediary (Membrane) for authentication, action execution, and proxy requests, expanding trust and exposing CRM access to another service.

Confidence: 86%Severity: 55%
Audit Metadata
Analyzed At
Sep 17, 2026, 08:17 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fagile-crm%2F@6cb6f787d07bca44209d2e188d259768bdce07e33009b6ec2fc1a8f67dd53a50
Security Audit — socket — agile-crm