skills/membranedev/application-skills/cyclr/Socket

cyclr

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly coherent with its stated purpose, and the CLI install path appears official, but it materially expands trust by routing Cyclr authentication and API traffic through Membrane. This is not confirmed malware, but the third-party credential/data mediation and broad action/proxy capability make it medium risk.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Apr 29, 2026, 08:13 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcyclr%2F@ebdd3b9af42d4a707d5e90fcb6a5224fb61463ba