teamwork-crm

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose matches CRM operations and its CLI install path is legitimate, but all authentication and Teamwork CRM traffic are mediated by Membrane rather than direct official Teamwork API calls. That third-party credential and data routing is the main risk; it is not confirmed malware, but it expands trust beyond what a direct Teamwork CRM skill would normally require.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
May 1, 2026, 07:47 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fteamwork-crm%2F@889d3bbad75d0dc1a9399b4dcafa62934ab2fb31
Security Audit — socket — teamwork-crm