salla

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent with Membrane's stated integration platform, and the CLI install source appears official, so this is not malware. However, the skill's actual data flow routes authentication and API traffic through Membrane rather than directly to Salla, creating a meaningful third-party trust and credential-forwarding risk that is higher than a direct API integration.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 29, 2026, 05:41 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsalla%2F@b25cb27c8d7ccd5ae068ac04717c9d808c1103cb