fivedegrees

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based integration, but its actual footprint is broader than a normal Five°degrees skill because all authentication and data operations are mediated by Membrane infrastructure instead of the official Five°degrees API. The npm install path is relatively trustworthy, yet the third-party credential and data routing materially increases risk.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
May 3, 2026, 08:54 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffivedegrees%2F@ffdfa01c985ce3fdfd3a5783fbadd6714b351b43
Security Audit — socket — fivedegrees