skills/membranedev/application-skills/lusha/Socket

lusha

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s stated purpose is Lusha integration, but it requires a Membrane account, Membrane CLI, and Membrane-managed auth/data flow rather than direct use of Lusha’s official API. The install source is relatively trustworthy, but the intermediary routing of credentials and Lusha data makes the scope and data flow broader than a narrowly scoped Lusha skill.

Confidence: 83%Severity: 61%

Audit Metadata

Analyzed At

Apr 30, 2026, 09:40 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flusha%2F@1a57e5ea3a23d0fe7e6da54e6605022a5fd12cef