skills/membranedev/application-skills/espocrm/Socket

espocrm

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's basic function is plausible, and the CLI install path appears legitimate, but the actual integration is centered on Membrane as a third-party intermediary. Routing authentication and CRM API traffic through Membrane is broader than a direct EspoCRM skill and creates medium-high data-flow and credential-forwarding risk.

Confidence: 85%Severity: 66%

Audit Metadata

Analyzed At

Mar 15, 2026, 08:29 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fespocrm%2F@7035a7a3eafc88e14d2c225eadfb290d4a273584