dots

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is largely legitimate and official, but the skill is internally inconsistent: it claims to integrate a puzzle game while exposing fintech payout/transfer/user-management actions. Its data flow also relies on Membrane as an intermediary rather than clear direct Dots API interaction, and it enables consequential financial operations plus server-generated actions. This looks more like a generic Membrane connector wrapper with mismatched branding than a coherent Dots skill.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
Apr 22, 2026, 09:26 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdots%2F@356c14ea174ff8eabe851809c02ad86e59f9535a