alight-solutions

Warn

Audited by Socket on Mar 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This document is a benign integration skill specification describing how to use the Membrane CLI to interact with Alight Solutions. It contains no signs of malicious code, obfuscation, or credential-harvesting instructions. The primary security consideration is the normal trust dependency: Membrane will handle authentication and proxy requests, so users must trust Membrane's infrastructure and npm distribution of @membranehq/cli. No direct evidence of malware or covert exfiltration was found.

Confidence: 80%Severity: 75%
Audit Metadata
Analyzed At
Mar 4, 2026, 08:56 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Falight-solutions%2F@fb51ea9b4b13e35fa457dc8491c7fbacb85a4161