web3forms-contact-forms-for-static-websites

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent as a Membrane-based Web3Forms wrapper, but it routes authentication and application data through Membrane instead of the official Web3Forms API. The npm install path is relatively normal, yet the third-party intermediary model and unpinned CLI make this a medium-risk integration rather than a benign direct API skill.

Confidence: 80%Severity: 57%
Audit Metadata
Analyzed At
May 1, 2026, 06:40 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fweb3forms-contact-forms-for-static-websites%2F@cbc5c271078bd0d072bfe29807a50d9c3b0e3649
Security Audit — socket — web3forms-contact-forms-for-static-websites