axesso-data-service-amazon

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with its stated purpose and uses an official npm-distributed Membrane CLI, so there is no strong malware signal. The main concern is data-flow integrity: authenticated Axesso interactions are funneled through Membrane as a third-party intermediary with proxy capabilities, which is a meaningful trust expansion beyond direct official API use.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Apr 28, 2026, 10:28 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Faxesso-data-service-amazon%2F@110b7cafe517a55e531b9b3e7e2b714eb8a5bab3