singular

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is coherent for a Membrane-based Singular integration and uses an official npm-distributed CLI, so there is little evidence of malware. However, all authentication and API traffic are routed through Membrane's service and proxy instead of directly to Singular, which creates meaningful third-party data exposure and medium security risk.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 22, 2026, 08:26 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsingular%2F@5b10eaa5677ebab19144f88b59b41afac4847901