sellercloud
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent with its stated purpose as a Membrane-based Sellercloud integration, and its CLI comes from an official registry path. However, it routes authentication and Sellercloud data through Membrane as a third-party intermediary, uses an unpinned CLI install, and enables broad proxied actions. This is not clearly malicious, but it carries meaningful trust and data-flow risk beyond a direct Sellercloud integration.
Confidence: 86%Severity: 56%
Audit Metadata