ibm-cloud
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose broadly matches IBM Cloud management, and the CLI install source is legitimate, so this is not confirmed malware. However, the core integration is mediated through Membrane rather than IBM’s official APIs/CLI, requiring a separate Membrane account and routing cloud access and data through a third-party service; that intermediary trust and dynamic action execution make the skill higher risk than a direct IBM integration.
Confidence: 85%Severity: 57%
Audit Metadata