nationbuilder
Warn
Audited by Socket on Mar 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities broadly match its purpose, and the Membrane CLI install path is consistent with the publisher and official docs. The main concern is data-flow integrity: NationBuilder authentication and API traffic are routed through Membrane as an intermediary rather than using NationBuilder’s direct OAuth/API flow, which expands trust scope and forwards sensitive access to a third party. This looks more like a legitimate integration pattern with moderate platform-trust risk than malware.
Confidence: 87%Severity: 52%
Audit Metadata