filestack

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent for a Membrane-published integration, and the CLI install source appears legitimate, but the actual data path is a third-party intermediary. Users seeking a Filestack skill are really granting a Membrane account and routing Filestack operations through Membrane, which creates medium security risk from credential delegation, remote action execution, and indirect data exposure.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
May 1, 2026, 06:42 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffilestack%2F@f501b9abdd91ece94229aa9033320e9a0cd00f96
Security Audit — socket — filestack