skills/membranedev/application-skills/whatconverts/Socket

whatconverts

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose broadly matches its capabilities, and the CLI install path is official npm-based, but the integration is architected around Membrane as a third-party intermediary for authentication, credential refresh, and API proxying. That makes data flow and credential scope broader than a direct WhatConverts integration and is the primary risk.

Confidence: 87%Severity: 66%

Audit Metadata

Analyzed At

Apr 2, 2026, 05:36 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwhatconverts%2F@7372cc972abd1aa70d34e9c2d5441fdecd43e12f