skills/membranedev/application-skills/datumbox/Socket

datumbox

Warn

Audited by Socket on May 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install source is reasonably legitimate, but the skill's real footprint is a Membrane proxy/gateway for Datumbox rather than a direct Datumbox integration. The mismatched description and third-party credential/data routing make it internally inconsistent and medium risk, though not confirmed malicious.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

May 2, 2026, 09:42 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdatumbox%2F@a1a3fc1112695c3da5cef64c584aece357b13b42