unstructured

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's behavior is mostly coherent with its stated purpose, and the Membrane CLI install path appears official. The main concern is data-flow integrity: instead of direct Unstructured API access, the skill routes authentication and requests through Membrane's intermediary platform, which expands trust and exposes document data to a third party. This is not clearly malicious, but it is a meaningful security and privacy risk relative to a direct integration.

Confidence: 87%Severity: 53%
Audit Metadata
Analyzed At
Apr 21, 2026, 04:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Funstructured%2F@83a69f7fc44c03c9ef77cc4602333be65d60dcec