skills/membranedev/application-skills/ecwid/Socket

ecwid

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install path is relatively trustworthy, but the skill’s real footprint is an Ecwid-through-Membrane integration, not direct Ecwid access. Requiring a Membrane account and proxying auth and API traffic through Membrane creates a meaningful third-party credential and data-flow risk beyond what users may expect from an Ecwid skill.

Confidence: 85%Severity: 61%

Audit Metadata

Analyzed At

Apr 23, 2026, 01:41 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fecwid%2F@3d1530dd878f3846b7b1469cd910ba8c6b3fbfa6