payram-checkout-integration

Warn

Audited by Socket on Feb 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This document is an integration guide for PayRam checkout flows. The code examples and data flows are internally consistent with the stated purpose: creating payments, redirecting customers, polling status, and handling confirmations. I found no signs of hidden malicious code, obfuscated payloads, or credential forwarding to unknown third parties. Security concerns are limited to typical integration omissions: webhook authentication is not shown (risk if integrators implement insecure webhooks), logging may leak operational identifiers, and integrators must securely store the PAYRAM_API_KEY and ensure PAYRAM_BASE_URL points to a trusted server. Overall the artifact appears benign but integrators should follow best practices for secret management and webhook verification.

Confidence: 80%Severity: 75%
Audit Metadata
Analyzed At
Feb 28, 2026, 08:27 AM
Package URL
pkg:socket/skills-sh/payram%2Fpayram-mcp%2Fpayram-checkout-integration%2F@ee1631c94245fc9ad7ca4483fbda27413e30c377