teamwork

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, and the CLI install source appears official, but the real data flow is not direct Teamwork integration. It requires trusting Membrane as a third-party intermediary for authentication, token handling, and proxied API access, which is a meaningful but not clearly malicious expansion of scope.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Sep 23, 2026, 08:48 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fteamwork%2F@3a3a7f91a067ba4833b9123376b061a81bb25773188cdf66b8e693c8a2d9bd7c