securionpay

Warn

Audited by Socket on May 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent as a Membrane-based SecurionPay integration and uses an official npm-distributed CLI, so it is not strong evidence of malware. However, all SecurionPay access and authentication are routed through Membrane instead of directly to official SecurionPay APIs, creating third-party credential/data mediation and moderate security risk for a payment-data skill.

Confidence: 88%Severity: 52%
Audit Metadata
Analyzed At
May 7, 2026, 06:58 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsecurionpay%2F@d169bae300284304f8e9a64d9692479b5cae3241
Security Audit — socket — securionpay