act-365

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities mostly align with CRM integration, and the install source is an official npm package documented by the same platform. The main risk is that all Act! 365 authentication and API traffic are funneled through Membrane as a third-party intermediary rather than directly to official Act! endpoints, creating a meaningful credential and data-routing trust dependency beyond what the skill title alone suggests.

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
Apr 22, 2026, 10:45 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fact-365%2F@e508894f2b2e463d5b9fba634c4725fd3268e59b