skills/membranedev/application-skills/plivo/Socket

plivo

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but it broadens trust by installing and relying on a third-party CLI and routing Plivo authentication/API access through Membrane instead of Plivo directly. This is not confirmed malware, yet the intermediary credential/data flow and unpinned external CLI make it a medium-risk integration skill.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Sep 27, 2026, 11:56 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fplivo%2F@b88871f866a6d07350e0657dd0292f9244f2d42eb626ecf03b05fcb81832d93f