skills/membranedev/application-skills/livekit/Socket

livekit

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated LiveKit purpose is plausible, but it depends on a separate Membrane platform that installs a global CLI, stores its own credentials, and proxies LiveKit API traffic through third-party infrastructure. This is not confirmed malware, but the data flow and trust expansion are disproportionate compared with a direct LiveKit integration.

Confidence: 89%Severity: 62%

Audit Metadata

Analyzed At

Sep 17, 2026, 04:43 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flivekit%2F@720ead85de16fdc1fe49806243ac88ccbb7d5045d138617126a372984fbe580a