bizimply

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities fit its stated Bizimply integration purpose, and the CLI install source appears to be official Membrane infrastructure. The main concern is data-flow integrity: Bizimply authentication and API traffic are routed through Membrane as an intermediary that stores credentials and logs requests, rather than going directly to Bizimply APIs. This is disclosed and plausibly legitimate for the product, so it is not malware, but it increases trust and privacy risk beyond a direct integration.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
Apr 30, 2026, 08:44 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fbizimply%2F@98a1b11e30c7c1974e7a748d6466d10ffab486ba
Security Audit — socket — bizimply