rapid7-insight-platform

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities generally match its stated Rapid7 integration purpose, and the CLI install path is consistent with official Membrane tooling. The main concern is data-flow integrity: Rapid7 authentication and API traffic are brokered through Membrane’s proxy and server-side credential handling rather than direct Rapid7 endpoints, which is disclosed but expands the trust boundary and creates moderate security risk.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Apr 24, 2026, 06:02 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Frapid7-insight-platform%2F@beea4433a7eddb826caafb66295ff8c72d6c8ccb