expedy

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively trustworthy and same-vendor, but the skill is internally inconsistent: it presents as an Expedy travel/expense integration while highlighting device-management actions, and it routes authentication/data through Membrane rather than directly to Expedy. This looks more like a broad Membrane connector wrapper than a narrowly scoped Expedy skill.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
May 1, 2026, 02:32 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fexpedy%2F@77a8e6dac04347e265ecd05869105d2ee412d817