chargebee

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill presents a coherent Chargebee integration flow using Membrane-managed authentication and proxy-based API access. The install path uses official registry sources, credentials are handled by Membrane, and data flows are consistent with legitimate API usage. While there are general security considerations around logging, TLS enforcement, and auditability, there is no evident credential harvesting, supply-chain compromise, or dangerous autonomous behavior. Overall, the footprint is proportionate and aligned with the stated purpose, yielding a BENIGN to MEDIUM risk posture with low immediate red flags. Continuous monitoring of logs and access patterns is recommended.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 02:46 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fchargebee%2F@29f1a3ccbe80a82de02ccb1a8611c455c3fd5bb3