solarwinds-service-desk

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with SolarWinds Service Desk management, and the CLI install path is reasonably legitimate via npm. However, the integration is not a direct SolarWinds API client: authentication, request routing, and data access are mediated by Membrane, and the proxy/auto-connector model materially expands trust and data exposure. This looks more like a managed third-party gateway skill than a narrow first-party SolarWinds integration.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Apr 29, 2026, 04:54 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsolarwinds-service-desk%2F@7fe564df187fe5888b6c9a0ef4f40bf5273ffdf5