skills/membranedev/application-skills/calendly/Socket

calendly

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's capabilities mostly match its Calendly integration purpose, and the CLI comes from an official registry path. The main concern is data-flow integrity: Calendly authentication and API requests are funneled through Membrane as an intermediary, creating moderate third-party trust and privacy risk despite being openly disclosed.

Confidence: 85%Severity: 52%

Audit Metadata

Analyzed At

May 1, 2026, 08:51 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcalendly%2F@340a44c02dc6c4ca160a254ef28fb03c67756e39