factorial

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install source is mostly coherent and low-to-moderate risk, but the skill’s actual integration path is a third-party Membrane gateway rather than direct Factorial API usage. For an HR-data skill, routing authentication and record access through an intermediary is a notable data-flow and scope concern even if the tooling appears officially published by Membrane.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
May 1, 2026, 06:10 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffactorial%2F@f0e06b7e01f54de5ea535a018d5d6b2a354610e9