manageengine-servicedesk-plus-cloud
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities mostly align, and installation uses a legitimate npm package, but the integration routes authentication and API traffic through Membrane rather than directly to ManageEngine. That intermediary data flow and credential delegation are proportionate to the product model yet introduce meaningful third-party trust and medium security risk.
Confidence: 87%Severity: 52%
Audit Metadata