saleslens

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's functionality broadly matches its stated purpose, and the CLI install path is consistent with the publisher's official npm/docs presence. The main concern is data-flow integrity: all SalesLens access is routed through Membrane as an intermediary, with mutable `@latest` CLI execution and third-party credential handling, which raises medium risk even without clear malicious indicators.

Confidence: 85%Severity: 52%
Audit Metadata
Analyzed At
May 1, 2026, 06:42 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsaleslens%2F@24673d34004c049772f4fd2ef5276912e000fbbd
Security Audit — socket — saleslens