skills/membranedev/application-skills/here/Socket

here

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent as a HERE integration guide, and its install source is an official npm package rather than an obviously malicious payload. However, it requires users to authenticate and route HERE access through Membrane as a third-party broker, which is a disproportionate trust and data-flow expansion compared with a direct HERE integration skill.

Confidence: 88%Severity: 55%

Audit Metadata

Analyzed At

Sep 18, 2026, 06:13 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fhere%2F@52698de17da2de1aa162bd1c7bb79028210ffacb9d06da167209809e8cc6f10d