bics

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s broad behavior mostly fits an integration skill, and the CLI comes from an official npm package, but the core data flow is through Membrane as an intermediary rather than directly to official BICS APIs. Unpinned `@latest` execution, generic proxy capability, and the mismatched BICS docs link make the footprint broader and less trustworthy than a narrowly scoped BICS skill.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 29, 2026, 01:46 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbics%2F@9d54354e0a30c72ca29e1fcba364305f754b0561
Security Audit — socket — bics