skills/membranedev/application-skills/botpenguin/Socket

botpenguin

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is broadly aligned with its stated purpose and uses a verifiable first-party npm CLI, so it does not look malicious. However, it introduces a third-party intermediary trust boundary for BotPenguin credentials/data and enables consequential messaging actions, making the overall risk medium rather than benign.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

May 6, 2026, 03:22 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbotpenguin%2F@e788261c700a7e17b753c85231c2138211bbe351