stackify

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the install path is relatively standard, but the skill’s actual footprint is not a direct Stackify integration—it is a Membrane-platform integration that routes authentication, action execution, and Stackify data through Membrane. That intermediary design is disproportionate to the stated purpose of simply interacting with Stackify and creates meaningful credential/data-flow risk, though there is no clear evidence of confirmed malware or obfuscation.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Apr 22, 2026, 11:51 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fstackify%2F@df56a1d1feae4e7de8b653a7d9ff661eeb8d08c8