woosender
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The Woosender skill presents a coherent and proportionate integration pattern: it leverages Membrane as the credential broker, uses official tooling to access Woosender APIs, and confines data flow to authenticated API calls via Membrane. There are no suspicious download/execution patterns, no credential leakage in the described flow, and the permission surface is appropriate for a integration/connector skill. Overall, the footprint is benign with respect to the stated purpose, though it remains prudent to ensure Membrane’s proxy endpoints and any network calls are properly rate-limited and logged.
Confidence: 98%
Audit Metadata