forescout
Warn
Audited by Socket on Apr 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and capabilities largely align, and the install path is an official npm package rather than a raw download. The main concern is data-flow integrity: Forescout access is proxied through Membrane, making Membrane a credential and data intermediary rather than using Forescout APIs directly. This is not clear evidence of malware, but it introduces meaningful trust and privacy risk beyond a direct integration.
Confidence: 86%Severity: 56%
Audit Metadata