terraform
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose and commands are mostly coherent, and the Membrane CLI appears to be an official npm-distributed tool. However, the integration is not a direct Terraform skill: API calls and auth are funneled through Membrane's proxy/service, creating a meaningful third-party data-flow and credential-handling risk disproportionate to a pure Terraform connector.
Confidence: 87%Severity: 56%
Audit Metadata