autodesk-bim-360
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose is coherent, and the installer comes from a legitimate registry, so this is not confirmed malware. However, the skill routes Autodesk authentication and API activity through Membrane's third-party CLI/service rather than directly to official Autodesk endpoints, creating medium security risk and a notable data-flow trust concern.
Confidence: 88%Severity: 56%
Audit Metadata