dots
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install path is largely legitimate and official, but the skill is internally inconsistent: it claims to integrate a puzzle game while exposing fintech payout/transfer/user-management actions. Its data flow also relies on Membrane as an intermediary rather than clear direct Dots API interaction, and it enables consequential financial operations plus server-generated actions. This looks more like a generic Membrane connector wrapper with mismatched branding than a coherent Dots skill.
Confidence: 84%Severity: 63%
Audit Metadata