dynapictures

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly coherent as a Membrane-based DynaPictures integration, and the CLI install source appears official. The main concern is data-flow integrity: instead of direct DynaPictures API use, the skill routes authentication and API access through Membrane as an intermediary, increasing trust and credential-handling scope beyond the target SaaS alone. This looks more like a high-trust third-party gateway than malware, with moderate security risk but no strong signs of overtly malicious intent.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:44 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdynapictures%2F@f11727e2f1d552c7cd57549a43aba062c45fd706
Security Audit — socket — dynapictures