2checkout
Warn
Audited by Socket on Mar 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The fragment describes a coherent, Membrane-managed integration flow for 2Checkout with credential handling isolated to Membrane’s authentication lifecycle. It aligns with a legitimate use-case: an integration skill that utilizes a centralized credential manager and a proxy to interact with an external API. No hardcoded secrets, no suspicious downloads, and the data flow stays within established trust boundaries (Membrane service and 2Checkout via Membrane proxy). Overall risk is moderate due to reliance on external infrastructure and credential exposure potential if misconfigured, but the footprint is consistent with the stated purpose.
Confidence: 75%Severity: 75%
Audit Metadata