skills/membranedev/application-skills/sheetsu/Socket

sheetsu

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent and uses official same-org installation paths, so it does not look malicious. However, its actual data flow is a third-party mediated integration through Membrane rather than direct Sheetsu API usage, which introduces medium trust and data-routing risk beyond the stated app integration.

Confidence: 89%Severity: 52%

Audit Metadata

Analyzed At

Apr 30, 2026, 07:39 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsheetsu%2F@be07061c459295480196cd8ad70cc25173f0ed39