skills/membranedev/application-skills/branch/Socket

branch

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The install path is relatively normal, but the skill’s stated purpose is internally inconsistent: it claims Branch mobile measurement/deep linking while exposing a broad HR/operations dataset and routing all access through Membrane. The main risk is misleading scope and intermediary data flow rather than confirmed malware.

Confidence: 88%Severity: 68%

Audit Metadata

Analyzed At

Apr 29, 2026, 05:39 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbranch%2F@ef290c1ec9c85388a253c101bfef6b8891e09cce