foundriesio
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is coherent as a Membrane-based Foundries.io integration and uses an official npm-distributed CLI, so it is not outright malicious. However, it routes authentication and API traffic through Membrane rather than directly to Foundries.io, creating meaningful third-party credential and data-flow risk that users may not expect from a service-specific skill.
Confidence: 87%Severity: 66%
Audit Metadata