fusionauth

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose aligns with its capabilities, and the CLI install path appears legitimate and same-vendor. The main concern is data-flow integrity: FusionAuth access is mediated through Membrane's third-party platform and proxy rather than direct official FusionAuth endpoints, which expands trust and exposes data/credentials to an intermediary. This is not confirmed malicious, but it is a medium-risk integration pattern that should be treated cautiously.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 22, 2026, 08:20 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffusionauth%2F@35535a5a4503201eede6808aab32e85025daade8