document360
Warn
Audited by Socket on Mar 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's functional scope matches Document360 administration, and the CLI install path is relatively normal via npm, but the core integration is not direct. It requires a separate Membrane account and routes authentication and optional arbitrary API requests through Membrane as an intermediary, which is a meaningful data-flow and credential-forwarding concern for a skill presented as a Document360 integration.
Confidence: 86%Severity: 61%
Audit Metadata