skills/membranedev/application-skills/proprofs-project/Socket

proprofs-project

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent for a Membrane-published integration, and the CLI install path appears legitimate, but it materially expands trust by routing ProProfs access through Membrane services and a mutable external CLI. This is not confirmed malware, yet it carries medium security risk due to intermediary data flow and dependency on third-party execution/auth handling.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Apr 30, 2026, 05:39 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fproprofs-project%2F@d2c44ca28cfb9193faa3ec797078a4f0905d1e96