transifex

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose is plausible, and the CLI install path appears consistent with the publisher, so this is not a clear malware pattern. However, the actual integration is a Membrane-mediated proxy to Transifex, requiring users to trust a third-party account, third-party auth handling, and third-party request routing rather than direct official Transifex API access; that makes the data flow broader and less proportionate than a straightforward Transifex skill.

Confidence: 86%Severity: 61%
Audit Metadata
Analyzed At
Apr 2, 2026, 04:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ftransifex%2F@1fbf1bca34f13677dc0e4f77b0f4992c2dfc47d8