myotpapp

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively normal, but the skill's purpose and capabilities are mismatched, and all authentication/data flows are routed through Membrane as an intermediary rather than directly to official MyOTP.App endpoints. This is not confirmed malware, but it is an overbroad third-party proxy integration with unclear scope and trust boundaries.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Apr 21, 2026, 04:12 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmyotpapp%2F@c75da588d3d192f010e7273e63e39afc6701f867