automox

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is coherent in function, but it is not a direct Automox integration; it installs and relies on Membrane as a third-party broker for authentication and API access. Because install provenance is reasonably consistent and there is no obvious malware behavior, this is not malicious, but the intermediary credential/data flow and unpinned CLI execution create medium security risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 30, 2026, 12:03 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fautomox%2F@b0e65b577dbe20268d429d1da84b5f23ac028db4
Security Audit — socket — automox