skills/membranedev/application-skills/wso2/Socket

wso2

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is mostly coherent as a Membrane-based WSO2 integration guide, and the CLI install source appears official and proportionate. However, it routes WSO2 authentication and API traffic through Membrane instead of official WSO2 endpoints, creating a third-party trust and data-flow concern that is broader than a direct WSO2 skill.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Apr 2, 2026, 05:27 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fwso2%2F@03410fd9fea5b49028145d5d1e718a320136c770