skills/membranedev/application-skills/gooddata/Socket

gooddata

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated purpose matches its actions, and installation uses a normal official npm package, so this is not overtly malicious. However, it requires a Membrane account and routes GoodData auth and API traffic through Membrane's proxy rather than official GoodData endpoints, creating a nontrivial third-party credential and data-flow risk.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Apr 21, 2026, 09:05 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgooddata%2F@811c780b71bd109f24cc1532062a6d71ad291e5b