soax
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install path is relatively legitimate, but the skill has a notable purpose mismatch and sends Soax activity through Membrane as an intermediary rather than directly to Soax. This is more likely a mis-scoped or templated integration than confirmed malware, but the indirect data flow and inaccurate description make it medium risk.
Confidence: 85%Severity: 61%
Audit Metadata