salesloft

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's capabilities match a Salesloft integration, and the installer appears same-publisher and registry-hosted, but the core data flow is routed through Membrane rather than directly to official Salesloft APIs. That intermediary model is coherent with the skill's description yet introduces medium risk because authentication, connection metadata, and Salesloft data are exposed to a third-party service.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Apr 30, 2026, 03:21 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsalesloft%2F@5408a290a0fd8272ffe067f2f15001c184e6c364
Security Audit — socket — salesloft