google-my-business

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The install path is reasonably legitimate, but the skill's core design routes Google My Business auth and data through Membrane as an intermediary rather than directly to Google. That is a meaningful trust and data-flow expansion for a service-specific skill, though not strong evidence of outright malware.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 22, 2026, 11:21 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgoogle-my-business%2F@177395531c7908cb9aa348653cfd4e0c72c0d864