kingsumo

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is coherent with its stated purpose, and the CLI install source appears legitimate, but it relies on a third-party intermediary platform and proxy for authentication and API traffic instead of direct KingSumo access. That makes this more of a documented trust-centralization risk than malware, with medium security risk due to credential forwarding and proxy-based data flows.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Mar 14, 2026, 08:00 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fkingsumo%2F@295475a7c8ddf4a731788ab1de4f0f4cc1a4f36b