zenrows

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated ZenRows purpose is plausible, and the install path uses an official npm package rather than a hidden payload. But the core integration is not direct ZenRows access; it routes authentication and API operations through an unrelated third-party broker (Membrane), creating a trust and data-flow mismatch that is disproportionate to a simple vendor integration. No confirmed malware signals were found.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Oct 1, 2026, 08:37 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzenrows%2F@68efd95a7b9d0e7ef55356e9d708b8f4daaa645aa5c7b607770571b3af590e68