memsource

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated purpose matches its Memsource-management capabilities, and the CLI install path appears official and proportionate. However, all authentication and optional raw API traffic are routed through Membrane’s intermediary platform instead of directly to Memsource, creating meaningful third-party credential/data handling risk even though it is disclosed and product-consistent.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Apr 2, 2026, 09:33 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmemsource%2F@a706732eb250c964f2a8e9a054857845389bd41a