skills/membranedev/application-skills/wicked-reports/Socket

wicked-reports

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's stated purpose is Wicked Reports integration, but its actual operation depends on Membrane as a third-party gateway for authentication and API proxying. Install trust is moderate and not inherently malicious, yet the indirect data flow through Membrane is a meaningful integrity and privacy concern for a service-specific skill.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Apr 3, 2026, 08:27 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwicked-reports%2F@82d309473e32951c545220cb61590b01c42c83b7