google-cloud

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally coherent and uses an official npm-published CLI, so there is no strong malware signal. However, it is not a direct Google Cloud integration: authentication and API traffic are routed through Membrane-managed infrastructure, creating a third-party trust and data-flow boundary that users may not expect from a cloud-management skill.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 23, 2026, 03:47 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgoogle-cloud%2F@759ead4677d882ea0e2ff013f1bf65d79d04860b