aruba-networks
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly coherent with its stated Aruba integration purpose and uses an official npm-distributed Membrane CLI, so it is not overtly malicious. However, it routes Aruba authentication and data operations through a third-party Membrane platform instead of direct official Aruba APIs, and the docs understate local secret handling while using mutable `@latest` installs. This makes the skill medium risk and suspicious rather than benign.
Confidence: 88%Severity: 57%
Audit Metadata