skills/membranedev/application-skills/quaderno/Socket

quaderno

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is coherent as a Membrane-powered Quaderno connector, but it routes authentication, credentials, and Quaderno data through Membrane rather than directly to Quaderno. Install trust is moderate due to official npm distribution, yet the third-party credential/data mediation and unpinned CLI install make the overall risk medium.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

May 3, 2026, 04:48 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fquaderno%2F@fdecbd068ba80acc51b955af914cc58583565a0b