lexer

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively trustworthy and same-ecosystem, but the skill is internally inconsistent about what 'Lexer' is and routes interactions through Membrane as an intermediary rather than a clearly identified official service. The main risk is unclear purpose plus third-party credential/data handling, not confirmed malware.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Apr 30, 2026, 01:43 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flexer%2F@e22853a304947ebd48dc6f47dcec62e5dd04b6f5
Security Audit — socket — lexer