clickfunnels-classic

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent as a Membrane-based ClickFunnels connector, and the installer appears first-party via npm, but its actual footprint is broader than a normal direct ClickFunnels integration because authentication, action generation, and data access are routed through Membrane as an intermediary. This is not confirmed malware, but it creates medium risk from third-party credential delegation, indirect data handling, and mutable CLI installation.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 04:20 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fclickfunnels-classic%2F@0e7229074a5a9eeeb46944eec238c8525d05d82a