loop-returns

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core purpose is plausible, and the CLI install path is from an official registry, but the integration routes Loop access through Membrane as an intermediary rather than directly to Loop’s official API. Combined with mutable `@latest` installs and an inflated, partly implausible capability list, the skill is internally inconsistent enough to warrant caution even without clear evidence of outright malware.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 22, 2026, 03:54 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Floop-returns%2F@3b48c3697ea2f265c82a634833d4d4346ac5943d