skills/membranedev/application-skills/expertai/Socket

expertai

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is internally coherent for a Membrane-hosted connector, and its npm install path appears legitimate. However, all Expert.ai access and authentication are mediated by Membrane rather than going directly to Expert.ai, creating a meaningful third-party trust and data-flow risk; the unpinned `npx ...@latest` example adds minor supply-chain risk.

Confidence: 85%Severity: 50%

Audit Metadata

Analyzed At

Apr 24, 2026, 04:28 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fexpertai%2F@b4db56e751083ef3e7329875d16c99cbe49cc82f