skills/membranedev/application-skills/scoredetect/Socket

scoredetect

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The installer provenance is relatively legitimate, but the skill misrepresents what ScoreDetect is and routes all access through Membrane rather than the official direct API path. The main issue is trust and data-flow inconsistency with the stated purpose, not confirmed malware.

Confidence: 91%Severity: 66%

Audit Metadata

Analyzed At

Apr 22, 2026, 08:22 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fscoredetect%2F@6e37867db30116756792489148b016adfe7d5f93