loop-returns
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core purpose is plausible, and the CLI install path is from an official registry, but the integration routes Loop access through Membrane as an intermediary rather than directly to Loop’s official API. Combined with mutable `@latest` installs and an inflated, partly implausible capability list, the skill is internally inconsistent enough to warrant caution even without clear evidence of outright malware.
Confidence: 84%Severity: 56%
Audit Metadata