web3forms-contact-forms-for-static-websites
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is internally coherent as a Membrane-based Web3Forms wrapper, but it routes authentication and application data through Membrane instead of the official Web3Forms API. The npm install path is relatively normal, yet the third-party intermediary model and unpinned CLI make this a medium-risk integration rather than a benign direct API skill.
Confidence: 80%Severity: 57%
Audit Metadata