Skills
skills/membranedev/application-skills/workato/Socket

workato

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with Workato automation, and its CLI install path appears official and proportionate. The main concern is data-flow integrity: Workato API access and credential handling are mediated through Membrane's proxy/service rather than direct official Workato endpoints, combined with broad action scope and an unpinned `npx ...@latest` path.

Confidence: 87%Severity: 63%
Audit Metadata
Analyzed At
Apr 21, 2026, 03:36 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fworkato%2F@e2b03180af656719f2ceb03de74f9259e8bcfaee