elastic
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly coherent for a Membrane-mediated Elastic integration and uses an official npm-distributed CLI, so it is not overtly malicious. Risk comes from the intermediary data flow through Membrane instead of direct Elastic APIs, global mutable CLI install, and the ability to create/run arbitrary actions against Elastic.
Confidence: 84%Severity: 56%
Audit Metadata