microcks

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is legitimate and same-vendor, so this is not a malicious downloader. However, the skill's actual footprint is a Membrane integration more than a direct Microcks skill: authentication, credential management, and API traffic are routed through Membrane's proxy layer, creating third-party credential forwarding and data-flow concerns that are not strictly necessary for interacting with Microcks.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Apr 21, 2026, 04:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmicrocks%2F@01286402c67148b38f43746fd3c786e9f2646ede