clickhelp

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The ClickHelp skill presents a coherent integration pattern: it uses Membrane's CLI and proxy-based authentication to interact with ClickHelp APIs, avoiding local secret leakage and keeping credentials within Membrane-controlled flows. There are no evident download-execute patterns from untrusted sources, no obvious credential harvesting, and data flows appear to align with the stated purpose of managing ClickHelp data via Membrane. The primary risks are typical for any CLI-driven integration: potential exposure of inputs in logs and reliance on Membrane’s authentication lifecycle. Overall, the footprint is proportionate to the stated purpose, with manageable security considerations centered on proper logging hygiene and ensuring Membrane manages credentials server-side.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 12:46 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fclickhelp%2F@65c706313eca6b369019f3d0ded909c81527179a