skills/membranedev/application-skills/livechat/Socket

livechat

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities mostly align with its purpose, and the CLI source appears official and same-vendor. The main concern is data-flow integrity: LiveChat authentication and API traffic are mediated by Membrane’s platform and proxy, expanding trust to a third party. This is disclosed and plausible for the product, so it is not malicious, but it is higher risk than a direct official-API integration.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

Apr 28, 2026, 10:54 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flivechat%2F@b9a9d3d30af94d4d9f047ac48d99071e273a2b9c