skills/membranedev/application-skills/signpath/Socket

signpath

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated purpose is coherent, and the CLI install source is legitimate, but the actual data flow is through Membrane as a third-party intermediary rather than directly to SignPath. That makes the skill higher risk than a direct first-party API integration, though not overtly malicious.

Confidence: 86%Severity: 51%

Audit Metadata

Analyzed At

Apr 23, 2026, 07:12 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsignpath%2F@55f866718cc76c82370db383470eceecce9b598a