cisco-meraki

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities broadly match its Meraki-management purpose, and the CLI install path appears legitimate via npm. The main concern is data-flow integrity and trust expansion: Meraki auth and API traffic are mediated by Membrane rather than going directly to Cisco, and the skill allows impactful write operations plus generic proxying. This is not confirmed malicious, but it carries medium risk due to third-party credential handling and control-plane access.

Confidence: 84%Severity: 54%
Audit Metadata
Analyzed At
Apr 21, 2026, 10:29 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcisco-meraki%2F@e3d93c56f2cee0599ee5ea937ea402a63cc163ee