hansei

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities largely align, and the CLI install path appears official and low-risk. The main concern is data-flow integrity: Hansei access and auth are mediated through Membrane rather than a direct Hansei client, so users must trust a third-party service and CLI with request handling and credential management. This is not confirmed malware, but it is a moderate-risk intermediary integration.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Mar 27, 2026, 09:26 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fhansei%2F@f84606a6708823774f8dcca3a29c4565eb2f5f1a