seqera
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s Seqera-management purpose is plausible, but its real footprint is a Membrane-mediated broker workflow that installs and trusts a third-party CLI/service, forwards authentication through Membrane, and routes Seqera access via Membrane instead of Seqera’s official API. This is not confirmed malware, but it creates meaningful supply-chain and credential/data-flow risk beyond a direct Seqera integration.
Confidence: 85%Severity: 64%
Audit Metadata