document360

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's functional scope matches Document360 administration, and the CLI install path is relatively normal via npm, but the core integration is not direct. It requires a separate Membrane account and routes authentication and optional arbitrary API requests through Membrane as an intermediary, which is a meaningful data-flow and credential-forwarding concern for a skill presented as a Document360 integration.

Confidence: 86%Severity: 61%
Audit Metadata
Analyzed At
Mar 15, 2026, 07:41 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdocument360%2F@b2df8a6305f98fbb3c37b6d6f709a3a5273de82d