skills/membranedev/application-skills/jfrog/Socket

jfrog

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is internally coherent as a Membrane-powered JFrog integration, and the install source appears official. However, it routes JFrog authentication and all operational traffic through Membrane as an intermediary, creating meaningful third-party credential and data-flow risk that is broader than a direct JFrog API integration.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Apr 28, 2026, 10:29 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fjfrog%2F@cc100c57d7fabb6e91b4ec5571c4b150b8c78665