autodesk-bim-360

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is coherent, and the installer comes from a legitimate registry, so this is not confirmed malware. However, the skill routes Autodesk authentication and API activity through Membrane's third-party CLI/service rather than directly to official Autodesk endpoints, creating medium security risk and a notable data-flow trust concern.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Sep 18, 2026, 12:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fautodesk-bim-360%2F@a9308ccaaad6489768af84cd1f6dcf12e7043027fa34b8de8db96953bce3d261
Security Audit — socket — autodesk-bim-360