skills/membranedev/application-skills/auth0/Socket

auth0

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's Auth0 purpose is plausible, and the CLI install path is official npm-based rather than overtly malicious. However, it routes Auth0 access, authentication handling, and direct API requests through Membrane's third-party CLI/proxy instead of Auth0's native API flow, creating medium trust and data-flow risk disproportionate to a simple Auth0 integration.

Confidence: 88%Severity: 56%

Audit Metadata

Analyzed At

Oct 1, 2026, 07:08 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fauth0%2F@d6bfcf7b7a98f5d74d8d95b2b479a2bfe05ca4c4d95949fe375568342f7d3216