skills/membranedev/application-skills/flippingbook/Socket

flippingbook

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

The skill is mostly coherent with its stated purpose, and the CLI install path appears legitimate via npm. However, it centralizes FlippingBook authentication and API traffic through Membrane's third-party platform and proxy, which creates a meaningful trust and data-flow concern. Overall this is better classified as suspicious-by-architecture than malicious.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Apr 21, 2026, 05:38 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fflippingbook%2F@0a76214db6f65d477dea008a15ced807f2c4362c