unzer

Warn

Audited by Socket on Apr 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose aligns with Unzer integration, and the CLI install path is consistent with the publisher's documented npm distribution. However, it routes authentication and API access through Membrane rather than directly to Unzer, so sensitive payment data and credentials depend on a third-party intermediary. This is not clearly malicious, but it expands trust and data-flow scope enough to merit caution.

Confidence: 86%Severity: 52%
Audit Metadata
Analyzed At
Apr 3, 2026, 09:00 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Funzer%2F@e597aa769d3ada7c894ef6993ee296748be4a62d