skills/membranedev/application-skills/scoredetect/Socket

scoredetect

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The installer provenance is relatively legitimate, but the skill misrepresents what ScoreDetect is and routes all access through Membrane rather than the official direct API path. The main issue is trust and data-flow inconsistency with the stated purpose, not confirmed malware.

Confidence: 91%Severity: 66%

Audit Metadata

Analyzed At

Apr 30, 2026, 01:41 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fscoredetect%2F@24f6c6671597282fe98e2f58843a1e97d2842a91