bancontact-payconiq-company

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated purpose matches its capabilities, and the CLI source appears official, but the core integration depends on Membrane as a credential-managing intermediary and proxy rather than talking directly to Bancontact Payconiq's official API. This is not confirmed malware, but it introduces meaningful third-party trust, credential-handling, and data-flow risk beyond a direct service integration.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Apr 28, 2026, 11:51 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbancontact-payconiq-company%2F@4d416107950258a09612d1d67ee5eb908d1aa2f4