time-doctor

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively legitimate, but the skill's real footprint is broader than a direct Time Doctor integration: it requires a separate Membrane account, forwards authentication to Membrane, and routes Time Doctor data/actions through Membrane-managed services. That intermediary credential and data flow is the main risk.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Apr 29, 2026, 03:22 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftime-doctor%2F@267ef21ea50f149459795b3c34c7f5a00c01fa00