nationbuilder

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its purpose, and the Membrane CLI install path is consistent with the publisher and official docs. The main concern is data-flow integrity: NationBuilder authentication and API traffic are routed through Membrane as an intermediary rather than using NationBuilder’s direct OAuth/API flow, which expands trust scope and forwards sensitive access to a third party. This looks more like a legitimate integration pattern with moderate platform-trust risk than malware.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Mar 14, 2026, 02:25 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fnationbuilder%2F@af55b52c85518e78c414afe30a7529e54e953ba7