teamwork-crm
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose matches CRM operations and its CLI install path is legitimate, but all authentication and Teamwork CRM traffic are mediated by Membrane rather than direct official Teamwork API calls. That third-party credential and data routing is the main risk; it is not confirmed malware, but it expands trust beyond what a direct Teamwork CRM skill would normally require.
Confidence: 85%Severity: 62%
Audit Metadata