skills/membranedev/application-skills/amazon-elasticsearch/Socket

amazon-elasticsearch

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The install path is mostly legitimate and same-publisher, but the skill's core design routes authentication, credential refresh, and Elasticsearch API traffic through Membrane rather than directly to AWS. That third-party gateway model is broader than the stated Amazon Elasticsearch purpose and creates medium risk around credential forwarding and data-flow integrity.

Confidence: 89%Severity: 62%

Audit Metadata

Analyzed At

Apr 28, 2026, 10:55 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Famazon-elasticsearch%2F@d0800580098bcb081da48ab76d7d26f403170025