typeform

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities match a Typeform integration, and the npm-installed CLI appears vendor-aligned, so this is not fundamentally incompatible with its stated purpose. However, all Typeform access and authentication are mediated through Membrane rather than direct Typeform APIs, which makes credential/data flow less transparent and raises medium risk for third-party interception or overreach.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 19, 2026, 11:22 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftypeform%2F@c6c45a9bc77b2aa7aebe0205807ab9ccedae24a41cdba1374e9a3f0bad10aa9f