skills/membranedev/application-skills/datumbox/Socket

datumbox

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install source is reasonably legitimate, but the skill's real footprint is a Membrane proxy/gateway for Datumbox rather than a direct Datumbox integration. The mismatched description and third-party credential/data routing make it internally inconsistent and medium risk, though not confirmed malicious.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Apr 21, 2026, 09:34 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdatumbox%2F@e78568c0fb03f40228e0e57bb54ac1f11a1d768d