Skills
skills/membranedev/application-skills/bannerbear/Socket

bannerbear

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's stated purpose is coherent, and the installer comes from a normal npm source, so this is not confirmed malware. However, the integration is materially mediated by Membrane rather than Bannerbear's official direct API, meaning auth and action data flow through a third-party service, and the CLI install is mutable via `@latest`.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 23, 2026, 11:25 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbannerbear%2F@ec5fc6984632f1aa1831f8caf0f14c0bb3677696