elorus

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose broadly matches its capabilities, and the CLI install path looks official and proportionate. However, the actual data flow routes Elorus authentication and API traffic through Membrane as an intermediary, with third-party credential storage and proxying; that is a medium security risk and the main concern, though not strong evidence of malware.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 25, 2026, 04:56 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Felorus%2F@a5959fe446a7ed1c6249f73d49e55585c9a8af26