wso2

Warn

Audited by Socket on May 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based WSO2 wrapper, but its actual footprint centers on a third-party intermediary rather than direct WSO2 APIs. The install source is reasonably trustworthy, yet the account requirement, server-side auth handling, and routing of WSO2 data/actions through Membrane make the data flow broader than the WSO2-only purpose suggests.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
May 4, 2026, 03:54 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwso2%2F@ceae5fa6833f901b024f3ebcf9b7494447eecef1
Security Audit — socket — wso2