proprofs-project

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and the CLI install path appears to be official and proportionate. The main concern is data-flow integrity: ProProfs authentication and API traffic are routed through Membrane’s intermediary platform and proxy instead of directly to official ProProfs endpoints. That is documented and likely intentional, but it materially broadens trust and forwards credentials/data to a third party.

Confidence: 87%Severity: 54%
Audit Metadata
Analyzed At
Apr 22, 2026, 07:14 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fproprofs-project%2F@59621150503f5d5d10a8ea39163aa22ede7384f0