superdocu

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is mostly coherent in purpose and uses an official Membrane CLI install path, so it does not look overtly malicious. The main concern is data-flow integrity: Superdocu access is mediated through Membrane accounts, services, and proxy endpoints rather than directly to Superdocu, creating a third-party trust and visibility layer over document-management operations. Overall this is best classified as suspicious-to-moderate risk rather than benign, driven by intermediary credential/data handling rather than malware indicators.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 22, 2026, 08:51 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsuperdocu%2F@2fb37027aaf8c5a2a31c8a10e1f5fb82288d4057