snov

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install path is reasonably trustworthy, but the skill’s core design routes Snov authentication and data through Membrane rather than directly to Snov. That intermediary architecture is inconsistent with a minimal Snov integration and creates meaningful third-party credential and data exposure risk, though there is no clear evidence of hidden malware or obfuscation.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Apr 30, 2026, 10:37 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsnov%2F@1484653b1829c8c0eaceeccea207213eaf50fb1b