payram-self-hosted-payment-gateway

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: The skill’s capabilities mostly match its stated self-hosted crypto gateway purpose, but it carries elevated risk due to a pipe-to-shell installer, transitive helper installation, and handling of high-value wallet/API secrets for financially consequential actions. This looks purpose-aligned rather than overtly malicious, but it is not low-risk.

Confidence: 81%Severity: 76%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:40 PM
Package URL
pkg:socket/skills-sh/payram%2Fpayram-helper-mcp-server%2Fpayram-self-hosted-payment-gateway%2F@f9a0adc69eacfd03a9338efebc3c19b074f004e4
Security Audit — socket — payram-self-hosted-payment-gateway