self-integration
Fail
Audited by Socket on Mar 18, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS. The skill is internally consistent with Membrane's published purpose, and there is no local download/execute behavior or unverifiable binary. However, it grants a third-party platform broad delegated control over many external apps, forwards sensitive data and action inputs through that intermediary, and enables high-impact real-world actions across a very wide scope. The main risk is not malware but overbroad authority and third-party mediation of credentials and app activity.
Confidence: 87%Severity: 72%
Audit Metadata