flutterwave

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s payment-management purpose broadly matches its capabilities, but its actual footprint is a Membrane-mediated integration rather than a direct Flutterwave one. The main risks are unpinned third-party CLI trust, credential/data routing through Membrane-managed infrastructure, and support for financial actions with real-world consequences.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Apr 30, 2026, 11:07 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fflutterwave%2F@9b3400846d17fddae8a2881c7bf6d40e1de7f626
Security Audit — socket — flutterwave