fullstory

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, and the CLI install source appears official and npm-based. The main concern is data-flow integrity: Fullstory access and credentials are mediated by Membrane, a third-party platform, including a broad proxy feature, which increases trust and exposure beyond a direct official API integration.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Mar 14, 2026, 11:24 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffullstory%2F@268a3999833cd2ebc74a9a3b0b78fe4d5417f8a1