jetbrains-marketplace

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-powered integration, but its actual footprint is broader than a simple JetBrains/IntelliJ skill. It installs and relies on a third-party CLI and routes authentication and API traffic through Membrane rather than directly to JetBrains, creating medium supply-chain and data-flow risk despite using a real vendor and official npm distribution.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 07:57 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fjetbrains-marketplace%2F@0d1dab15b8f9a03273f1725942126f06e60398b2289109f29ac906ad02cc409b
Security Audit — socket — jetbrains-marketplace