deepgram

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is plausible, and the CLI install path is relatively trustworthy, but the integration is not a normal direct Deepgram client. It requires a separate Membrane account and routes authentication and API traffic through Membrane's connection/proxy layer, which is a meaningful data-flow and credential-handling mismatch for a Deepgram skill.

Confidence: 82%Severity: 62%
Audit Metadata
Analyzed At
Apr 29, 2026, 05:43 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdeepgram%2F@abd91f2c8ab436d4330d5e16900b7a4270e3cff8
Security Audit — socket — deepgram