skills/automateyournetwork/netclaw/infoblox-ddi/Socket

infoblox-ddi

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities fit its stated Infoblox DDI purpose and there is no real command-injection behavior, but it forwards production Infoblox credentials to a third-party MCP package from a personal publisher with an unpinned command wrapper. This is a moderate supply-chain and credential-forwarding risk rather than confirmed malware.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Oct 2, 2026, 03:58 PM

Package URL

pkg:socket/skills-sh/automateyournetwork%2Fnetclaw%2Finfoblox-ddi%2F@71c401fd30a51080aec83955386f190f4dafc1ce3c9cabdd9808fc06e79c3fa9