skills/membranedev/application-skills/wisepops/Socket

wisepops

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent as a Membrane-powered WisePops integration, and the CLI source appears publisher-aligned via npm. However, all WisePops access and credential handling are routed through Membrane rather than official WisePops APIs, creating a significant third-party trust boundary and medium security risk.

Confidence: 84%Severity: 54%

Audit Metadata

Analyzed At

Apr 30, 2026, 09:15 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwisepops%2F@6331a3677b1c7523195fca64daa84450ad809160