smartproxy

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install path is fairly legitimate, but the skill’s actual operation depends on Membrane as a third-party broker for authentication and API traffic instead of direct Smartproxy access. That intermediary data flow is disproportionate enough to raise medium risk, though there is no clear evidence of confirmed malware or overt credential theft.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Apr 28, 2026, 05:27 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsmartproxy%2F@cf94740cd707cd43157af9d7b2fbc6c2ce75afe1
Security Audit — socket — smartproxy