skills/automateyournetwork/netclaw/splunk-saved/Socket

splunk-saved

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the execution path is not internally trustworthy. The skill asks for valid Splunk credentials and routes them through an ambiguous npx-installed MCP server that is not verified as an official Splunk package, creating a disproportionate supply-chain and credential-forwarding risk.

Confidence: 90%Severity: 86%

Audit Metadata

Analyzed At

Oct 2, 2026, 03:59 PM

Package URL

pkg:socket/skills-sh/automateyournetwork%2Fnetclaw%2Fsplunk-saved%2F@417b49191bb74964f7c91bff79987857d343bc7fc7e05b1df5651a9674d42ccf