datadog

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities fit its Datadog-management purpose, and the CLI comes from a plausible official npm source, so this is not outright malicious. The main concern is architectural: Datadog authentication and API traffic are mediated by Membrane rather than going directly to Datadog, creating third-party credential/data exposure and moderate real-world action risk.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
May 1, 2026, 05:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fdatadog%2F@8b32087e227462f295e7b17a36c8d583e2ae778d