schoology

Warn

Audited by Socket on May 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally coherent as a Membrane-powered Schoology integration, and the CLI install path appears legitimate. However, all authentication and Schoology access are mediated through Membrane rather than official Schoology endpoints, creating notable third-party trust and data-flow risk. This looks more like a platform-mediated integration than malware, but the intermediary architecture and broad action surface raise medium security concerns.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
May 2, 2026, 08:20 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fschoology%2F@461405a61011cb22b9ecdd8cbdaba6a773a0d677
Security Audit — socket — schoology