skills/membranedev/application-skills/bannerbear/Socket

bannerbear

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated purpose is coherent, and the installer comes from a normal npm source, so this is not confirmed malware. However, the integration is materially mediated by Membrane rather than Bannerbear's official direct API, meaning auth and action data flow through a third-party service, and the CLI install is mutable via `@latest`.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

May 1, 2026, 06:08 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbannerbear%2F@56aa33b50a84e37d577d08be360565674482f50f