skills/membranedev/application-skills/efinder/Socket

efinder

Warn

Audited by Socket on Mar 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is not overtly malicious and uses an official npm-distributed CLI, but its stated purpose is internally inconsistent and all authenticated traffic is routed through Membrane as an intermediary. That makes the skill higher-trust than a direct Efinder integration and warrants medium security caution.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Mar 16, 2026, 01:03 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fefinder%2F@394c214f08770b977f2e573e8277dee5a65c9bf3