pipeliner-crm

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose matches CRM integration, and the CLI install path appears legitimate, but the actual integration is a Membrane-mediated proxy rather than a direct Pipeliner CRM client. The main risk is third-party mediation of authentication and CRM data, plus an unpinned external CLI dependency; this is coherent with the publisher’s platform model but broader in trust and data flow than a direct CRM skill.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
May 6, 2026, 09:17 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fpipeliner-crm%2F@a6b6364a7debc128758dff119d56a1fd0126ba1e
Security Audit — socket — pipeliner-crm