skills/membranedev/application-skills/smartrecruiters/Socket

smartrecruiters

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's purpose broadly matches recruiting-platform automation, and the install path is same-org and registry-based. However, it routes SmartRecruiters access through Membrane-managed auth and proxy infrastructure instead of direct official API use, creating a third-party credential/data path that is not strictly necessary for the stated purpose.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Apr 22, 2026, 12:41 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsmartrecruiters%2F@abbd83ee82767a104f7a0f6c4962eddcf6df88da