thinkific

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with its stated Thinkific-integration purpose and uses a legitimate npm-distributed CLI, but it routes authentication and API traffic through Membrane rather than directly to Thinkific. That third-party mediation is proportionate to the integration-platform model, yet it increases credential and data-flow risk beyond a direct official API skill.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Mar 28, 2026, 07:54 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fthinkific%2F@5ea321528a5dec7da7ad7ec01513465890f539c1