hookdeck

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's broad behavior is mostly consistent with Hookdeck management, and the CLI install path appears legitimate. However, all authenticated Hookdeck access is funneled through Membrane's intermediary proxy/service rather than directly to Hookdeck, creating a notable third-party credential and data-routing risk that is larger than a direct integration would require.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Mar 14, 2026, 02:39 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fhookdeck%2F@bf975a26f8b64a848e48ec88ce4af1880d6668ad