datadog

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities match a Datadog integration, and the CLI install path appears legitimate via npm, so this is not confirmed malware. However, all Datadog access and credentials are mediated through Membrane rather than going directly to Datadog's official APIs, creating a third-party intermediary and credential/data-flow trust concern that is broader than a direct Datadog skill.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Mar 14, 2026, 10:55 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdatadog%2F@6649c08a8c58ab7e0493e9a5374eeaa5e46381fd