skills/membranedev/application-skills/webcrm/Socket

webcrm

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-powered WebCRM connector, and the CLI source appears publisher-consistent, but it routes authentication, credentials, and CRM operations through Membrane rather than directly to official WebCRM APIs. That extra intermediary trust and mutable CLI install path make it medium risk rather than benign.

Confidence: 84%Severity: 63%

Audit Metadata

Analyzed At

Apr 29, 2026, 02:49 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwebcrm%2F@400ce702d0435be97b97f77d6d0c548068b302b4