google-dialogflow

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is mostly coherent with its stated purpose and uses an official npm-distributed CLI, but it adds a third-party trust boundary by requiring a Membrane account and routing Dialogflow API traffic and credential handling through Membrane infrastructure instead of directly to Google. This is not clearly malicious, but the proxy-based data flow and credential mediation make it higher risk than a direct official API integration.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Apr 21, 2026, 05:38 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fgoogle-dialogflow%2F@7d3cd4fd6aeec858ca35f0db871fbda4cd10be98