splunk-search
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is plausible, but the implementation trust model is weak. A generic, unpinned `npx`-launched `splunk-mcp` package is not verified as official Splunk software, yet it would receive Splunk credentials and query data; this makes the skill’s actual footprint riskier than its description suggests.
Confidence: 88%Severity: 79%
Audit Metadata