skills/membranedev/application-skills/poof/Socket

poof

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install path is relatively legitimate, but the skill's stated Poof identity is inconsistent with the apparent real service, and all API access is funneled through Membrane's third-party proxy/custody model. The footprint fits a Membrane integration, yet the misleading service description and indirect data flow make the skill internally inconsistent and medium-high risk.

Confidence: 90%Severity: 63%

Audit Metadata

Analyzed At

Apr 29, 2026, 05:41 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fpoof%2F@d8b8de8003cd0792332274bdbaeef674c61b66f0