skills/membranedev/application-skills/gift-up/Socket

gift-up

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities are mostly aligned, and the CLI install source appears official, but all Gift Up! access is mediated by Membrane rather than direct official API use. That third-party credential/data routing is a meaningful trust and privacy risk, though not clearly malicious or disproportionate to the stated integration purpose.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Apr 28, 2026, 10:55 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgift-up%2F@34ced135227a243ff2d913a2e43e86afd45708ba