agile-crm
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities fit Agile CRM management, and the install path is an official npm package rather than an obvious malware loader. The main concern is data-flow integrity: instead of calling Agile CRM directly, the skill requires a third-party intermediary (Membrane) for authentication, action execution, and proxy requests, expanding trust and exposing CRM access to another service.
Confidence: 86%Severity: 55%
Audit Metadata