teamwork-desk

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill presents a coherent and proportionate integration for Teamwork Desk via the Membrane CLI, with authentication managed by Membrane and API calls proxied through Membrane. The installed component comes from an official registry, credentials are not stored locally, and data flows through legitimate service endpoints. While there is a dependency on Membrane for authentication and proxying, this aligns with the stated purpose and maintains a controlled data flow. Overall, the asset is benign-to-suspicious in risk, with no evident credential harvesting or bypass of standard security controls. Maintain normal security expectations around Membrane’s authentication lifecycle and ensure access to Teamwork Desk APIs remains restricted to authorized users/projects.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 12:13 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fteamwork-desk%2F@8c715fdfa8e457603b3201c2916e024af1e1f29f