skills/membranedev/application-skills/deepseek/Socket

deepseek

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is not overt malware, and its installer comes from an official registry, but it is a DeepSeek integration that depends on a third-party CLI and routes authentication and API traffic through Membrane rather than DeepSeek directly. The main concerns are intermediary data flow, broader trust in an external CLI/service, and mutable global install behavior.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Sep 17, 2026, 06:13 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdeepseek%2F@a24297bd602e28a04bc715b2439b402635fa997e2b8c4afbe6a1907d7e79a77a