oracle-eloqua
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose and capabilities mostly align, and the Membrane CLI appears to be an official same-vendor tool distributed via npm. However, the integration routes authentication and Oracle Eloqua data through Membrane as an intermediary instead of Oracle's official API path, and it uses unpinned `@latest` installs/execution. This is not clearly malicious, but it introduces medium trust and data-flow risk that exceeds a direct Eloqua integration.
Confidence: 84%Severity: 56%
Audit Metadata