alert-logic

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, and the CLI comes from an official same-vendor npm package, but the actual data and auth flow is mediated through Membrane rather than directly to Alert Logic. That added proxy layer is disproportionate to a straightforward Alert Logic skill and creates medium security risk, though there is no clear evidence of malware or obfuscation.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:13 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Falert-logic%2F@ee49a828e7e00ef56dc30d4a95e4df2a5c0ec74e