octopus-deploy

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities fit Octopus management, and the CLI install source is relatively trustworthy via npm and Membrane docs. However, the core integration routes Octopus authentication and API traffic through Membrane’s infrastructure rather than direct official Octopus endpoints, creating a third-party credential/data intermediary that is disproportionate to a straightforward Octopus skill.

Confidence: 88%Severity: 64%
Audit Metadata
Analyzed At
Apr 21, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Foctopus-deploy%2F@39798a47527073f565e27c9d7248d4b5f3db64d7