monei

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based MONEI integration, and its CLI install path is consistent with the publisher, but it routes all MONEI operations through Membrane rather than official MONEI APIs. That intermediary design introduces third-party credential handling and data-flow risk disproportionate to a plain service integration, though there is no clear evidence of malware or concealment.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Apr 22, 2026, 07:42 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmonei%2F@1fc8ae8257c814708620417e1544cdfe314eef76