skills/membranedev/application-skills/lucca/Socket

lucca

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install path is mostly legitimate, but the skill's real footprint is a Membrane integration layer, not a direct Lucca integration. Lucca authentication and data are routed through Membrane's platform, which is a meaningful third-party intermediary and raises medium-high data-flow and credential-forwarding risk.

Confidence: 88%Severity: 68%

Audit Metadata

Analyzed At

Apr 30, 2026, 11:07 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flucca%2F@50431648c320ba109d5c605d88f728fdfff199aa