ibanity

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose and uses an official-looking Membrane CLI from npm, so it does not look malicious. However, it inserts Membrane as a third-party intermediary for authentication and banking data access instead of talking directly to Ibanity, which raises medium data-flow and credential-forwarding risk for a finance-related integration.

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
Apr 22, 2026, 07:43 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fibanity%2F@2cbaa98819b2ed71db1743c7950186c5cf3924e2