typeform
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities match a Typeform integration, and the npm-installed CLI appears vendor-aligned, so this is not fundamentally incompatible with its stated purpose. However, all Typeform access and authentication are mediated through Membrane rather than direct Typeform APIs, which makes credential/data flow less transparent and raises medium risk for third-party interception or overreach.
Confidence: 89%Severity: 58%
Audit Metadata