skills/membranedev/application-skills/message-bird/Socket

message-bird

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent in purpose, but its actual data flow is through Membrane as an intermediary rather than direct MessageBird APIs. The npm-installed CLI appears vendor-consistent and not overtly malicious, yet credential handling and service data are delegated to a third-party platform, which materially increases trust and privacy risk.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Apr 21, 2026, 11:20 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmessage-bird%2F@ab5d54ca9617e7d2604a3fd4e99d3b90f08853ca