icinga

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally consistent as a Membrane-hosted Icinga integration, and the CLI install path appears official. However, it routes authentication, action creation, and Icinga data access through Membrane instead of directly to Icinga, creating a third-party credential/data intermediary that is broader than a simple native API integration. This is not confirmed malware, but it carries medium security risk due to credential delegation and indirect data flows.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
May 1, 2026, 03:09 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ficinga%2F@d0715799cf38d3f7d744380923d3c6521fcb4664
Security Audit — socket — icinga