skills/membranedev/application-skills/anthropic/Socket

anthropic

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is coherent as an Anthropic integration guide, and the install path uses an official npm package rather than an opaque binary. But the actual integration is not direct: authentication, credential refresh, and API requests are routed through Membrane, a third-party intermediary, which creates medium data-flow and trust risk disproportionate to a straightforward Anthropic skill.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Sep 17, 2026, 10:55 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fanthropic%2F@d0e6f735cf53add96556643fd09146648ab8fd4898d3ce766f915d47e65ce812