xperiencify

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s general purpose matches Xperiencify integration, and the npm install source looks plausible, but the core design routes authentication and API traffic through Membrane rather than directly to official Xperiencify endpoints. That third-party credential handling and proxying are the main risks, especially given the broad `membrane request` capability and requirement for a separate Membrane account.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Apr 2, 2026, 03:13 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fxperiencify%2F@a9c0764e92981399af2b05f63f677d29ebba2875