soax

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The install path is relatively legitimate, but the skill has a notable purpose mismatch and sends Soax activity through Membrane as an intermediary rather than directly to Soax. This is more likely a mis-scoped or templated integration than confirmed malware, but the indirect data flow and inaccurate description make it medium risk.

Confidence: 85%Severity: 61%
Audit Metadata
Analyzed At
Apr 22, 2026, 08:51 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsoax%2F@286e70ab31ebd60835a639affc94a947f7a37dbf