time-doctor
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install path is relatively legitimate, but the skill's real footprint is broader than a direct Time Doctor integration: it requires a separate Membrane account, forwards authentication to Membrane, and routes Time Doctor data/actions through Membrane-managed services. That intermediary credential and data flow is the main risk.
Confidence: 87%Severity: 66%
Audit Metadata