microsoft-teams

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities align with Microsoft Teams management, and the npm install path appears official for Membrane, so this is not confirmed malware. However, it broadens trust significantly by routing Teams authentication and data through a third-party Membrane CLI/proxy rather than direct Microsoft Graph APIs, and it enables externally visible actions like sending messages and creating resources.

Confidence: 90%Severity: 63%
Audit Metadata
Analyzed At
Sep 16, 2026, 06:22 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmicrosoft-teams%2F@7e18cecd92afa594ce71a557d0e19b9946933d2b6d8109111dd0b6b2bd535abf
Security Audit — socket — microsoft-teams