skills/membranedev/application-skills/keycloak/Socket

keycloak

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s install path is relatively trustworthy, but its actual data flow is not a direct Keycloak integration. It depends on a third-party Membrane account, stores/refreshes auth server-side, and proxies Keycloak requests through Membrane, creating unnecessary intermediary access to credentials and data.

Confidence: 88%Severity: 64%

Audit Metadata

Analyzed At

Apr 30, 2026, 03:21 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fkeycloak%2F@79820679b69f33e44b81d097baea0da2282521cf