skills/membranedev/application-skills/carbone/Socket

carbone

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent as a Carbone integration guide, and the CLI install path appears legitimate, but its actual data flow depends on Membrane as a credential-managing proxy rather than direct Carbone API access. That intermediary routing is the main risk and makes the footprint broader than the stated purpose implies.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Apr 29, 2026, 03:21 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcarbone%2F@d43e30c3eb5cf9a5cbd23e8ac1c1aa7c4518cb18