skills/membranedev/application-skills/isolved/Socket

isolved

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is coherent as an Isolved integration, and the CLI install path appears official and low supply-chain risk. However, it routes authentication and sensitive HR/payroll data through Membrane as an intermediary rather than using Isolved directly, so the data flow and trust model are broader than the title alone suggests.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Apr 21, 2026, 05:38 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fisolved%2F@592cb6e96f2738f880637bd77fee76a390663bdd