fusionauth
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's stated purpose aligns with its capabilities, and the CLI install path appears legitimate and same-vendor. The main concern is data-flow integrity: FusionAuth access is mediated through Membrane's third-party platform and proxy rather than direct official FusionAuth endpoints, which expands trust and exposes data/credentials to an intermediary. This is not confirmed malicious, but it is a medium-risk integration pattern that should be treated cautiously.
Confidence: 87%Severity: 56%
Audit Metadata