skills/membranedev/application-skills/agora/Socket

agora

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent as a Membrane-hosted Agora integration, and the CLI source appears official, but the actual data path is a third-party managed intermediary rather than direct Agora API access. That added trust boundary, plus unpinned CLI execution and credential/session handling by Membrane, makes this medium risk rather than benign.

Confidence: 84%Severity: 57%

Audit Metadata

Analyzed At

Apr 22, 2026, 04:41 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fagora%2F@4e11b323a95c6ac29aa91740e22950dd5f57b195