formbricks
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is broadly coherent with its stated Formbricks integration purpose and uses an official-looking npm-distributed Membrane CLI, so there is no strong evidence of malware. However, it requires a separate Membrane account, routes authentication and Formbricks data through Membrane rather than directly to Formbricks, and allows dynamic action creation plus destructive operations. That makes it a medium-risk third-party mediation skill rather than a clearly benign direct API integration.
Confidence: 84%Severity: 58%
Audit Metadata