daily

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: mostly coherent Daily-management skill with an official same-vendor npm CLI, so not indicative of malware. Main concerns are the mismatched CRM-like description text, use of Membrane as an intermediary for Daily credentials/data, mutable `@latest` install, and support for destructive remote actions; overall this is a medium-risk integration skill, not confirmed malicious.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 28, 2026, 10:04 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdaily%2F@977ac1e2c2011249ced8b23502cd7998f4752c5f
Security Audit — socket — daily