ibm-cloud

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose broadly matches IBM Cloud management, and the CLI install source is legitimate, so this is not confirmed malware. However, the core integration is mediated through Membrane rather than IBM’s official APIs/CLI, requiring a separate Membrane account and routing cloud access and data through a third-party service; that intermediary trust and dynamic action execution make the skill higher risk than a direct IBM integration.

Confidence: 85%Severity: 57%
Audit Metadata
Analyzed At
Apr 22, 2026, 06:42 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fibm-cloud%2F@4dbf46845d80999695dfe5468a94a5ef1022bca1