alert-logic
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose is plausible, and the CLI comes from an official same-vendor npm package, but the actual data and auth flow is mediated through Membrane rather than directly to Alert Logic. That added proxy layer is disproportionate to a straightforward Alert Logic skill and creates medium security risk, though there is no clear evidence of malware or obfuscation.
Confidence: 84%Severity: 58%
Audit Metadata