skills/membranedev/application-skills/mercury/Socket

mercury

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The install path is mostly legitimate, but the skill is internally inconsistent and routes Mercury banking access through Membrane rather than directly to Mercury. For a finance-related integration, the third-party credential and data mediation plus mismatched documentation make the footprint broader and less trustworthy than the stated purpose.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Apr 28, 2026, 11:51 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmercury%2F@a4745ea760d8f8527d1594f7561be8497cb67c6f