skills/membranedev/application-skills/ringba/Socket

ringba

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the CLI comes from an official registry, but all authentication and Ringba access are funneled through Membrane as an intermediary. This is not confirmed malware, yet it creates meaningful third-party credential and data-routing risk compared with direct Ringba API use.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Apr 30, 2026, 03:23 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fringba%2F@644cb72eb7e20ead92c63a7d57b34188a5acb3f1