dbt-cloud
Warn
Audited by Socket on Sep 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose is coherent, and the CLI comes from an official npm package tied to Membrane, but the actual data flow is indirect. dbt Cloud access, authentication, and API traffic are routed through Membrane rather than directly to dbt's official API, making this a proportionate but medium-risk third-party proxy integration rather than a clearly benign direct vendor skill.
Confidence: 88%Severity: 61%
Audit Metadata