rise

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively legitimate, but the skill's scope is internally inconsistent and all authentication/API traffic is funneled through Membrane as an intermediary rather than directly to Rise. This is not confirmed malware, but it is a medium-risk integration pattern with disproportionate third-party credential and data handling.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Apr 28, 2026, 05:28 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Frise%2F@1f9a147a466efe3af9e6aeb05064e788675a88c9