skills/membranedev/application-skills/cloudinary/Socket

cloudinary

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's basic Cloudinary functionality is coherent, and the CLI source appears to be an official same-org npm package, but the integration is built around Membrane as a mandatory intermediary. That adds a third-party account, credential handling, and proxied data flow that are not strictly necessary for Cloudinary access, making the skill materially higher risk than a direct Cloudinary integration.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Apr 28, 2026, 05:26 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcloudinary%2F@98c394515c9e77c2b02fd4e4b58785566ed86c97