skills/membranedev/application-skills/hydrogen/Socket

hydrogen

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The install path is mostly legitimate and same-org via npm, but the skill has a major purpose mismatch and routes authenticated requests through Membrane as an intermediary. The strongest concern is incoherence about what “Hydrogen” actually is, which undermines trust in the requested capabilities and data flows.

Confidence: 90%Severity: 61%

Audit Metadata

Analyzed At

Apr 25, 2026, 11:50 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fhydrogen%2F@a78a88cd0615206a7a1f960ae16f7618ab724e8b