skills/membranedev/application-skills/countdown-api/Socket

countdown-api

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install path is largely legitimate, but the skill’s actual footprint is a Membrane gateway workflow rather than direct Countdown API use, and the eBay action examples are clearly inconsistent with the stated purpose. Risk is driven more by purpose/data-flow mismatch and third-party intermediation than by overt malware signals.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

May 3, 2026, 10:19 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcountdown-api%2F@619eedbb960faf28307ffe0f0ecaca1e1f792ecb