rapidoc

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install path is reasonably trustworthy, but the skill’s stated RapiDoc purpose is loosely matched to its actual footprint, which centers on a third-party Membrane platform that brokers auth, connection state, and remote action execution. The main risk is scope and data-flow indirection through Membrane plus dynamic action creation, not confirmed malware.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Apr 30, 2026, 11:37 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Frapidoc%2F@b02485e2c4fa6f3f3b7203bea1bfb5e6b4dd74c4
Security Audit — socket — rapidoc