elastic
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's capabilities fit Elastic management, and the install path is an official npm package rather than an obvious malware delivery chain. However, the actual data flow is mediated by Membrane, which stores/manages credentials and proxies Elastic requests through a third-party platform; that is disclosed but materially expands trust requirements beyond a direct Elastic integration. Overall this looks coherent but medium-risk due to intermediary credential and data routing plus unpinned CLI execution guidance.
Confidence: 87%Severity: 57%
Audit Metadata