skills/membranedev/application-skills/vtiger/Socket

vtiger

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's core CRM behavior matches its stated purpose, and the CLI install path appears legitimate. However, all Vtiger access and credentials are funneled through Membrane's infrastructure instead of going directly to official Vtiger endpoints, making this a third-party intermediary integration with elevated credential and data-flow risk.

Confidence: 87%Severity: 62%

Audit Metadata

Analyzed At

Mar 13, 2026, 05:30 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fvtiger%2F@ebf19c8d91fa1a8a2cdddb93a76056a69e80a8e7