advanced-web-ranking

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose mostly matches its capabilities, and the CLI comes from an official-looking npm scope tied to the publisher. However, the integration is not direct: authentication, credentials, and data access are routed through Membrane as an intermediary, which expands trust and creates a meaningful third-party credential/data handling risk. This is not confirmed malware, but it is higher-risk than a direct official API skill.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 30, 2026, 01:10 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fadvanced-web-ranking%2F@90fa38305e698d0b97c45ab7f06b8ec6f5216cf5