woosender

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Woosender skill presents a coherent and proportionate integration pattern: it leverages Membrane as the credential broker, uses official tooling to access Woosender APIs, and confines data flow to authenticated API calls via Membrane. There are no suspicious download/execution patterns, no credential leakage in the described flow, and the permission surface is appropriate for a integration/connector skill. Overall, the footprint is benign with respect to the stated purpose, though it remains prudent to ensure Membrane’s proxy endpoints and any network calls are properly rate-limited and logged.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 10:26 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwoosender%2F@f9bbcef45a126d6cfec3b67a2af136cd5269cc8e