maxmind-minfraud

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities are broadly aligned, and the CLI install path is same-vendor and npm-based rather than a raw payload. The main concern is data-flow integrity: MaxMind activity is routed through Membrane's intermediary proxy/account system, so credentials and sensitive fraud data are handled by a third party instead of going directly to MaxMind.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Apr 22, 2026, 12:51 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmaxmind-minfraud%2F@ff6d03870618099dcd1e81ed260271a6e6feea7d