quickbase

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly coherent for a Membrane-based Quickbase integration, and the CLI comes from npm rather than a raw installer. However, all Quickbase authentication and data access are routed through Membrane as a third-party intermediary, which increases trust and data-handling risk beyond a direct Quickbase integration; combined with an unpinned global CLI install, this makes the skill medium risk rather than benign.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
May 3, 2026, 07:09 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fquickbase%2F@1795dacd02d8f21c7a94a3795369d2bea6d6b039
Security Audit — socket — quickbase