skills/membranedev/application-skills/readme-com/Socket

readme-com

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose broadly matches Readme.com management, and the install path is relatively legitimate, but the actual trust boundary is Membrane, not Readme.com. The main risk is third-party mediation of credentials and data plus unpinned CLI installation, making this more than a simple direct-service integration.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Apr 30, 2026, 03:21 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Freadme-com%2F@a31fecd6a63a71cab5fa4294dcaa64deba30ce51