dapr

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane integration wrapper, but not as a direct Dapr skill. Its main risk is third-party mediation: authentication, connection state, action generation, and data exchange all flow through Membrane rather than official Dapr endpoints, plus the install uses an unpinned global CLI.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Apr 22, 2026, 09:07 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdapr%2F@9c80b87b1bd011c12966b79908c2d32064ca71ef