zabbix

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is internally coherent as a Zabbix integration, and its CLI install path is from an official registry, so this is not strong evidence of malware. However, all authentication and API traffic are routed through Membrane rather than directly to Zabbix, creating a meaningful third-party credential/data mediation risk; combined with unpinned CLI execution, this makes the skill medium risk rather than benign.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 2, 2026, 09:33 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fzabbix%2F@2e7cdba3079fb4c147e7ffa33cb15d31ab598a0a