saaspass

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is coherent for a Membrane-published connector, and its npm-based CLI install is relatively standard. The main concern is data-flow integrity: SAASPASS access is mediated through Membrane, so user data and delegated auth pass through a third-party service rather than directly to SAASPASS. This is not confirmed malware, but it is a meaningful trust and privacy expansion beyond a direct SAASPASS integration.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 21, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsaaspass%2F@185c580968625fc6353e4ca9adabc7ae5e57408b