dashlane

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose matches its capabilities, and the CLI install path appears legitimate, but it routes authentication and sensitive Dashlane vault operations through Membrane as a third-party intermediary. For a password-manager integration, that data-flow choice creates meaningful credential-forwarding and privacy risk even without clear evidence of malware.

Confidence: 86%Severity: 66%
Audit Metadata
Analyzed At
Apr 29, 2026, 04:53 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdashlane%2F@f11fb11636ed17f6a2604e2f7a2233a9d48f3df2
Security Audit — socket — dashlane