splunk-indexes
Warn
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to use the
splunk-mcppackage vianpx. This results in the automatic download of package content from the public NPM registry during execution. - [REMOTE_CODE_EXECUTION]: The use of
npx splunk-mcpfacilitates the execution of code downloaded from a remote repository. The package source is not associated with a known trusted vendor, which introduces a risk of executing unverified code.
Audit Metadata