skills/membranedev/application-skills/oracle-taleo/Socket

oracle-taleo

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's stated Oracle Taleo purpose is plausible, and the CLI install path is relatively normal, but the real integration is mediated by Membrane. Credentials and API traffic flow through a third-party service and proxy rather than directly to Oracle, which is a meaningful trust and data-flow expansion beyond what the title suggests.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Apr 28, 2026, 10:56 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Foracle-taleo%2F@e8f442cd2c0880477ef1295342b87539719a33b7