transifex

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated Transifex purpose is plausible, but the skill's actual footprint depends on a third-party brokered integration layer for authentication and API access. The install source is better than a raw script and not clearly malicious, yet routing credentials and requests through Membrane instead of directly to Transifex creates a meaningful trust and data-flow concern disproportionate to a simple vendor integration skill.

Confidence: 87%Severity: 64%
Audit Metadata
Analyzed At
Oct 12, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftransifex%2F@f5bb21fdf50cb7bcb406635a73bf1078367790ec8f9a21cd304b1efbd086265f