oracle-eloqua

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities mostly align, and the Membrane CLI appears to be an official same-vendor tool distributed via npm. However, the integration routes authentication and Oracle Eloqua data through Membrane as an intermediary instead of Oracle's official API path, and it uses unpinned `@latest` installs/execution. This is not clearly malicious, but it introduces medium trust and data-flow risk that exceeds a direct Eloqua integration.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 22, 2026, 09:52 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Foracle-eloqua%2F@6d85a240ef3c4455b8ebce16992c0e3baf781f32