dbt-cloud

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, and the CLI comes from an official npm package tied to Membrane, but the actual data flow is indirect. dbt Cloud access, authentication, and API traffic are routed through Membrane rather than directly to dbt's official API, making this a proportionate but medium-risk third-party proxy integration rather than a clearly benign direct vendor skill.

Confidence: 88%Severity: 61%
Audit Metadata
Analyzed At
Sep 25, 2026, 11:22 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdbt-cloud%2F@cdc21d8d7f59bfdb8974a9107e818c9c35358b9547c74e5a2daaf5e2bf1a1c65
Security Audit — socket — dbt-cloud