skills/membranedev/application-skills/qwilr/Socket

qwilr

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's install path is relatively normal, but its actual data flow is a third-party gateway model. For a 'Qwilr integration' skill, routing auth and document/account data through Membrane instead of Qwilr directly is a meaningful trust and privacy expansion that is under-emphasized in the description.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Apr 29, 2026, 01:20 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fqwilr%2F@f58db1de4155cfaa4bd4286328d7f9dd4feee75e