heartbeat

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install path is relatively legitimate, but the skill is not internally coherent. It claims to integrate Elastic Heartbeat monitoring while exposing actions for an unrelated user/group/channel platform, and it routes auth and operations through Membrane as a third-party intermediary instead of official vendor APIs. The main concern is purpose/data-flow mismatch, not confirmed malware.

Confidence: 90%Severity: 64%
Audit Metadata
Analyzed At
Apr 22, 2026, 03:54 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fheartbeat%2F@534af35e05484b3a3947c15f060946b4165da3e1