daily
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: mostly coherent Daily-management skill with an official same-vendor npm CLI, so not indicative of malware. Main concerns are the mismatched CRM-like description text, use of Membrane as an intermediary for Daily credentials/data, mutable `@latest` install, and support for destructive remote actions; overall this is a medium-risk integration skill, not confirmed malicious.
Confidence: 87%Severity: 56%
Audit Metadata