myotpapp
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install path is relatively normal, but the skill's purpose and capabilities are mismatched, and all authentication/data flows are routed through Membrane as an intermediary rather than directly to official MyOTP.App endpoints. This is not confirmed malware, but it is an overbroad third-party proxy integration with unclear scope and trust boundaries.
Confidence: 85%Severity: 68%
Audit Metadata