skills/membranedev/application-skills/delighted/Socket

delighted

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capabilities broadly align, but it shifts all Delighted access through Membrane rather than Delighted's official API, creating an intermediary trust boundary for credentials and data. The install path is official npm rather than a raw downloader, so this is not strongly malicious, but the unpinned CLI install and third-party credential/data routing make it medium risk.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Apr 28, 2026, 04:48 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdelighted%2F@4eb1567d90d6209310cd5b45a43b15a4f0854eb6