skills/membranedev/application-skills/payrexx/Socket

payrexx

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is coherent for Payrexx integration and uses an official npm-distributed Membrane CLI, so this is not malware. However, it expands trust by routing Payrexx authentication and API traffic through Membrane rather than directly to official Payrexx endpoints, creating medium risk around credential/data brokerage and mutable third-party CLI dependency.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Sep 29, 2026, 01:04 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fpayrexx%2F@003ef4f83716403651cfcaba38598e533bbb085214f6f6d6c7b3a7b5869288b9