skills/membranedev/application-skills/engagebay/Socket

engagebay

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's basic purpose is coherent, and the installer is not obviously malicious, but the real integration path is a third-party Membrane proxy/CLI rather than direct EngageBay API usage. That intermediary data flow and credential handling model materially raises trust and privacy risk, especially with an unpinned global CLI and dynamic action creation.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Apr 22, 2026, 08:22 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fengagebay%2F@09f310493131381cf9cb23375891eea5ddb193e9