illumidesk

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose matches Illumidesk administration, and the CLI install source appears legitimate, but the core data flow is routed through Membrane as a third-party intermediary rather than directly to Illumidesk. That proxy/auth-delegation model creates medium-high security risk and requires trusting Membrane with credentials and API traffic beyond what a direct integration would need.

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
Mar 18, 2026, 05:50 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fillumidesk%2F@f76de950be8d488d9babd77a2713bface9aaf61c