factorial
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the install source is mostly coherent and low-to-moderate risk, but the skill’s actual integration path is a third-party Membrane gateway rather than direct Factorial API usage. For an HR-data skill, routing authentication and record access through an intermediary is a notable data-flow and scope concern even if the tooling appears officially published by Membrane.
Confidence: 84%Severity: 62%
Audit Metadata