modern-treasury

Warn

Audited by Socket on May 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent for Modern Treasury operations, and the install source appears legitimate, but it routes authentication and API activity through Membrane as a third-party intermediary instead of direct Modern Treasury APIs. This is not confirmed malicious, but it creates moderate security and data-flow trust risk.

Confidence: 86%Severity: 57%
Audit Metadata
Analyzed At
May 5, 2026, 03:51 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmodern-treasury%2F@b98c0cd4dc9e8dad3333eef20083959f7a3e97d4
Security Audit — socket — modern-treasury