skills/membranedev/application-skills/google-recaptcha/Socket

google-recaptcha

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s stated purpose matches reCAPTCHA integration, but it achieves this by installing and trusting a third-party CLI and routing authentication and API traffic through Membrane rather than using direct Google APIs. This is not confirmed malware, yet the intermediary credential/data flow and unpinned external CLI make the skill medium risk.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Sep 28, 2026, 03:12 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgoogle-recaptcha%2F@a549fd7622c7888df2c4e8dcf9d2b18fb6fd3d9555982b39a2b8fd65d7a2aeb0