heartbeat

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install path is relatively legitimate, but the skill is not internally coherent. It claims to integrate Elastic Heartbeat monitoring while exposing actions for an unrelated user/group/channel platform, and it routes auth and operations through Membrane as a third-party intermediary instead of official vendor APIs. The main concern is purpose/data-flow mismatch, not confirmed malware.

Confidence: 90%Severity: 64%
Audit Metadata
Analyzed At
Apr 28, 2026, 03:01 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fheartbeat%2F@43ab0d82a6066abae4295c96a7f96cef9d35c010
Security Audit — socket — heartbeat