icepay

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent with its stated purpose, and the CLI/install path appears to be official Membrane infrastructure. However, it proxies ICEPAY access, credentials, and data through Membrane rather than using official ICEPAY APIs directly, which expands trust and creates medium risk for a payment-domain integration. This looks more like a third-party managed gateway skill than direct ICEPAY integration, so risk is elevated but not malicious.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 04:10 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ficepay%2F@85ada82465500daab884ba8e44ca05f4c61281a4
Security Audit — socket — icepay