docomo-digital

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, and the CLI install path appears official, but all DOCOMO Digital access is routed through Membrane rather than directly to official DOCOMO endpoints. This creates a meaningful intermediary trust and data-flow risk, amplified by unpinned CLI execution, though there is no strong evidence of malware or overt credential theft.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 25, 2026, 03:47 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdocomo-digital%2F@fe419ede824a014958359aba7cdd0a85c41f5614