partnerize

Warn

Audited by Socket on May 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose matches Partnerize management, and the Membrane CLI install path is relatively legitimate, but the integration is mediated through Membrane rather than Partnerize's official APIs. That third-party routing of authentication and Partnerize data is broader than necessary for a simple Partnerize skill and creates medium security risk, though there is no strong evidence of malware or overt credential theft.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
May 2, 2026, 01:42 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fpartnerize%2F@0d4d0fe3b64a9e15e290c5a804947f5577173fbc