google-cloud-dataflow

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s basic purpose is coherent, and the CLI install path is standard npm-based tooling from the stated vendor. However, the integration routes authentication and API traffic through Membrane’s platform and proxy instead of directly to Google Cloud Dataflow, creating a third-party credential and data mediation layer that is disproportionate to a simple Dataflow skill.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Apr 22, 2026, 01:14 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgoogle-cloud-dataflow%2F@276be9cdcc8fc51ac061e2957bc007d4895704a8