skills/membranedev/application-skills/whitehat-security/Socket

whitehat-security

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

The skill is coherent with its stated WhiteHat integration purpose and uses a plausible official CLI install path, so it is not overtly malicious. The main risk is architectural: authentication and API traffic are routed through Membrane rather than directly to WhiteHat, creating a third-party credential and data intermediary that raises medium security concern.

Confidence: 85%Severity: 62%

Audit Metadata

Analyzed At

Apr 2, 2026, 04:41 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwhitehat-security%2F@f7b071062d7ae9eeb4ac551e49074da990c9e891