skills/membranedev/application-skills/signalfx/Socket

signalfx

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent in using Membrane for automation, and the CLI comes from npm, but the core integration routes SignalFx authentication and data through Membrane instead of official SignalFx APIs. That third-party credential/data mediation and forced Membrane account requirement make the data flow higher risk than a direct service integration.

Confidence: 84%Severity: 66%

Audit Metadata

Analyzed At

Apr 21, 2026, 10:54 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsignalfx%2F@fc3593f1b773b67b5fdd83cf6a84e0bcdcad4e75