sap-successfactors

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, and the CLI comes from an official npm package tied to the same Membrane ecosystem. However, all SAP SuccessFactors access and auth are funneled through Membrane as a third-party intermediary, local token storage is involved, and installs are unpinned, so the trust and data-flow footprint is broader than a direct SAP integration.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Sep 21, 2026, 11:14 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsap-successfactors%2F@d9d5b9dd1a59e7a06b410a317b7f0fcbc8e5960ded000c242fdbbe6fa6e517e6
Security Audit — socket — sap-successfactors