skills/membranedev/application-skills/flowtrack/Socket

flowtrack

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install path is relatively benign and verifiable, but the skill's real footprint is a Membrane-mediated integration, not a direct FlowTrack one. The main risk is data-flow and credential mediation through Membrane's proxy/service, which is broader than the stated FlowTrack purpose and introduces a meaningful third-party trust dependency.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Apr 22, 2026, 09:05 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fflowtrack%2F@9f8aeb2a795e461eb14f2420e379147ca49c2ff6