salla

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent with Membrane's stated integration platform, and the CLI install source appears official, so this is not malware. However, the skill's actual data flow routes authentication and API traffic through Membrane rather than directly to Salla, creating a meaningful third-party trust and credential-forwarding risk that is higher than a direct API integration.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 29, 2026, 05:41 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsalla%2F@b25cb27c8d7ccd5ae068ac04717c9d808c1103cb
Security Audit — socket — salla