aruba-networks

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly coherent with its stated Aruba integration purpose and uses an official npm-distributed Membrane CLI, so it is not overtly malicious. However, it routes Aruba authentication and data operations through a third-party Membrane platform instead of direct official Aruba APIs, and the docs understate local secret handling while using mutable `@latest` installs. This makes the skill medium risk and suspicious rather than benign.

Confidence: 88%Severity: 57%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:30 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Faruba-networks%2F@06caec4bcdbb269ed3fba914be5f864d5fe3344b