docsumo

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is not overtly malicious and its install path is same-vendor and registry-based, but it is a Docsumo integration that requires a separate Membrane account, CLI, and intermediary service for auth and API access. That third-party credential/data routing and unpinned CLI install make the footprint broader and less direct than the stated Docsumo purpose.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
May 15, 2026, 07:38 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdocsumo%2F@63a77f7ce65d9fb000ef508db9c8dd62a6132a78
Security Audit — socket — docsumo