skills/membranedev/application-skills/realm/Socket

realm

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is mostly coherent for a Membrane-based Realm integration and uses an official npm package rather than a random installer, but it proxies authentication and API traffic through Membrane instead of using Realm APIs directly. That intermediary data flow and mutable `@latest` CLI execution create medium risk even without clear malicious behavior.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Apr 28, 2026, 11:52 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Frealm%2F@11111a0201deff881dfc14eca1fcee8e87cf5f5d