appdrag

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities broadly match AppDrag administration, and the Membrane CLI install path appears legitimate. However, the integration is mediated through Membrane rather than direct AppDrag APIs, and the exposed action set includes powerful file, SQL, and email operations plus natural-language action generation, making the trust and scope meaningfully broader than a narrow AppDrag helper.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 22, 2026, 02:45 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fappdrag%2F@cec062ba236d4e3d07fb9cbf62500421127d655c