octopus-deploy
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities fit Octopus management, and the CLI install source is relatively trustworthy via npm and Membrane docs. However, the core integration routes Octopus authentication and API traffic through Membrane’s infrastructure rather than direct official Octopus endpoints, creating a third-party credential/data intermediary that is disproportionate to a straightforward Octopus skill.
Confidence: 88%Severity: 64%
Audit Metadata