docparser

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, and the CLI install source appears legitimate, but all Docparser access is mediated through Membrane rather than the official Docparser API. That third-party credential/data routing is a meaningful trust and data-flow concern, though not strong evidence of malware.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
May 3, 2026, 02:36 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdocparser%2F@d45f5715fc9330c6ab9976652ffd5009e844c663
Security Audit — socket — docparser