skills/membranedev/application-skills/totalexpert/Socket

totalexpert

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and capabilities are mostly aligned, and its CLI install path appears to be official and same-vendor. The main concern is architectural: all Total Expert access and auth are mediated through Membrane, creating third-party credential/data routing plus broad action execution; combined with unpinned @latest installs, this makes the skill medium risk rather than benign.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Apr 29, 2026, 05:41 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftotalexpert%2F@7b9b7d0659a24f6d750df4fc33f186facf420736