skills/membranedev/application-skills/oracle-cloud-hcm/Socket

oracle-cloud-hcm

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent as a Membrane-based Oracle HCM integration, and its install path appears official. The main concern is data-flow integrity: sensitive HR data and authenticated API access are routed through Membrane's intermediary platform rather than directly to Oracle, with additional medium supply-chain risk from unpinned CLI execution.

Confidence: 85%Severity: 62%

Audit Metadata

Analyzed At

Apr 22, 2026, 09:05 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Foracle-cloud-hcm%2F@8f589ffcf70bf16d6b60eb9d8884d63e1d5b1ae6