arive

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is Arive integration, but its real footprint centers on a third-party Membrane gateway that handles auth, connections, action generation, and data access. The install path is relatively legitimate, so this is not confirmed malware, but the intermediary data flow and credential delegation make the skill riskier than a direct official-API integration.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 30, 2026, 09:54 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Farive%2F@4e23ad373c227df03a0bc8300e5a3f294d3526f6