skills/membranedev/application-skills/spinupwp/Socket

spinupwp

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is internally coherent as a Membrane-based SpinupWP integration, and its install source is same-org and official. However, all SpinupWP access is mediated through Membrane rather than the official SpinupWP API, creating a notable third-party data and credential-routing risk that is broader than a direct service integration.

Confidence: 86%Severity: 57%

Audit Metadata

Analyzed At

Apr 3, 2026, 02:08 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fspinupwp%2F@ed4c7e7f3b6f438c800d537a83ce342d7803e17e