unzer
Warn
Audited by Socket on Apr 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose aligns with Unzer integration, and the CLI install path is consistent with the publisher's documented npm distribution. However, it routes authentication and API access through Membrane rather than directly to Unzer, so sensitive payment data and credentials depend on a third-party intermediary. This is not clearly malicious, but it expands trust and data-flow scope enough to merit caution.
Confidence: 86%Severity: 52%
Audit Metadata