skills/membranedev/application-skills/dukaan/Socket

dukaan

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is coherent for a Dukaan integration and does not show overt malware patterns, but it routes authentication and data operations through Membrane rather than directly to Dukaan. The npm-installed CLI appears same-org and legitimate, so this is mainly a medium trust and data-flow risk, not confirmed malicious behavior.

Confidence: 84%Severity: 54%

Audit Metadata

Analyzed At

Apr 21, 2026, 11:43 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdukaan%2F@27fa4fa3f9599a1bd62f91a731b95e42460a70f9