skills/membranedev/application-skills/carbone/Socket

carbone

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s install path is mostly legitimate and consistent, but its actual data flow is not a direct Carbone integration. It requires trusting Membrane as a third-party credential and API proxy, which is a meaningful intermediary risk and broader than the skill’s simple Carbone framing.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Sep 23, 2026, 03:38 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcarbone%2F@8f34f62fefbe339c274c06cf8224b6975b47321a57ff495705b7d02704aefdba