sheetdb

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose broadly matches SheetDB automation, but its actual footprint centers on installing and trusting the Membrane CLI and routing authentication, intents, and action execution through Membrane rather than SheetDB’s native API. This is not confirmed malicious, yet the intermediary data flow and mutable external CLI make the skill medium risk.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 30, 2026, 08:44 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsheetdb%2F@0a9cf580929065212c9e1406236eed754c3fb413
Security Audit — socket — sheetdb