forcemanager

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's CRM purpose is coherent, and the CLI comes from an official npm package, so this is not overtly malicious. However, all ForceManager access is funneled through Membrane, a third-party intermediary that manages authentication and executes actions on the user's behalf, which creates meaningful data-flow and trust-scope risk beyond a direct ForceManager integration.

Confidence: 84%Severity: 54%
Audit Metadata
Analyzed At
May 6, 2026, 07:40 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fforcemanager%2F@33fa70502cacc8dea18155f5211e9bfe6aed4005
Security Audit — socket — forcemanager