formbricks

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is broadly coherent with its stated Formbricks integration purpose and uses an official-looking npm-distributed Membrane CLI, so there is no strong evidence of malware. However, it requires a separate Membrane account, routes authentication and Formbricks data through Membrane rather than directly to Formbricks, and allows dynamic action creation plus destructive operations. That makes it a medium-risk third-party mediation skill rather than a clearly benign direct API integration.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
May 3, 2026, 04:32 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fformbricks%2F@526f75d8fe7b3dee1581c2683bca56c30711d969
Security Audit — socket — formbricks