proprofs-project
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s purpose and capabilities mostly align, and the CLI install path appears to be official and proportionate. The main concern is data-flow integrity: ProProfs authentication and API traffic are routed through Membrane’s intermediary platform and proxy instead of directly to official ProProfs endpoints. That is documented and likely intentional, but it materially broadens trust and forwards credentials/data to a third party.
Confidence: 87%Severity: 54%
Audit Metadata