function

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s actual footprint is not well aligned with its stated purpose. It uses a real third-party CLI, but the target service is poorly identified, the docs link is unrelated, credentials are funneled through Membrane, and proxy requests may be sent to arbitrary URLs. This is more consistent with a generic gateway wrapper than a well-scoped Function integration.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Aug 18, 2026, 03:41 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffunction%2F@8c5a8f19049f22d5db68c01770e01566525dc9a9f760301f64212f29b9bcb440
Security Audit — socket — function