microsoft-teams

Warn

Audited by Socket on May 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly coherent with its Microsoft Teams integration purpose and uses an official npm-distributed Membrane CLI, so it does not look overtly malicious. The main concern is that all auth and API traffic are funneled through Membrane as a third-party gateway, plus the skill enables outbound communication and mutable `@latest` installation, making the overall risk medium rather than benign.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
May 12, 2026, 11:13 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmicrosoft-teams%2F@870f7d3e3cffdc527e9a61eb5179af3e0d2b5495
Security Audit — socket — microsoft-teams