whatsapp-by-online-live-support

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s basic purpose is coherent, but it relies on a third-party CLI/service layer that stores tokens and proxies requests, while framing the integration with official WhatsApp docs despite targeting a separate vendor. No confirmed malware or hidden execution is present, but the indirect credential/data flow and unpinned global CLI install make the skill higher risk than a direct official API integration.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Sep 19, 2026, 10:28 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwhatsapp-by-online-live-support%2F@6a00b536321952dfcae80d7d0334eecba8da898e4fd5884485f5e1bbdb6854c8