skills/automateyournetwork/netclaw/splunk-indexes/Socket

splunk-indexes

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is legitimate, but its actual execution path is weakly verified. It asks for raw Splunk credentials and routes them through an unpinned npx-installed package whose official Splunk ownership was not confirmed, creating medium-high supply-chain and credential-forwarding risk.

Confidence: 84%Severity: 80%

Audit Metadata

Analyzed At

Jul 30, 2026, 04:31 PM

Package URL

pkg:socket/skills-sh/automateyournetwork%2Fnetclaw%2Fsplunk-indexes%2F@3b2c96f86c3ce2ed697e81a8d40aca49e22ebfeaf9b575320ffe103236b4f750