chatwork

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's features match a Chatwork integration, and the CLI install path is broadly legitimate, but the core data flow routes Chatwork authentication and API activity through Membrane rather than directly to Chatwork. That intermediary design is proportionate to the advertised platform model yet still creates medium risk around credential handling, data visibility, and autonomous write actions.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Apr 28, 2026, 07:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fchatwork%2F@e646804c3764642b099b89fa878482a83d6a9b37
Security Audit — socket — chatwork