skills/membranedev/application-skills/clientary/Socket

clientary

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is broadly consistent with its stated purpose and uses an apparently official npm-distributed Membrane CLI, but it routes Clientary authentication and API traffic through Membrane rather than directly to Clientary. This intermediary data flow and credential trust expansion make it medium risk, though not confirmed malicious.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Apr 21, 2026, 06:41 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fclientary%2F@e14601f276985dfffeb449c92069b7cf76f146f6