cloudfiles

Warn

Audited by Socket on Apr 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is not overt malware, and its CLI install path is consistent with the publisher, but the service identity is inconsistent and all authenticated traffic is funneled through Membrane rather than directly to official CloudFiles APIs. The trust footprint is broader than the skill title suggests, so this is a medium-risk intermediary integration rather than a clean direct-service skill.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Apr 26, 2026, 09:18 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcloudfiles%2F@abc8376158dcc04d6a13f1775dc06ea444aff92d