elastic-path
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the install path is from an official registry, but all Elastic Path access is funneled through Membrane as a third-party intermediary. That makes the main risk credential/data mediation and proxying through a non-official service, not overt malware or an obviously malicious installer.
Confidence: 88%Severity: 54%
Audit Metadata