seven

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively normal and publisher-consistent, but the skill’s purpose and documentation are materially inconsistent: the linked official docs do not match the claimed Seven product, and the capability description is vague while granting broad proxied API access through Membrane. This looks more like an under-specified or misidentified connector than confirmed malware, but the mismatched identity and intermediary data flow make it unsuitable to treat as benign.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Mar 14, 2026, 09:40 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fseven%2F@1053a34beb765c3be42ba540cdd0cd45d5690da7