forcemanager

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s stated purpose and capabilities are mostly aligned, and the npm-based CLI install is plausible. The main concern is data-flow integrity: ForceManager access and auth are routed through Membrane’s proxy/service instead of directly to ForceManager, creating a third-party credential and traffic mediation layer. This is not clearly malicious, but it adds medium trust and privacy risk beyond a direct API integration.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Apr 24, 2026, 10:48 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fforcemanager%2F@c8d3fee3cec9f7545b38a2013447535b223528f8