skills/membranedev/application-skills/logstash/Socket

logstash

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly coherent for a Membrane-hosted Logstash integration, and the install source is official npm rather than an unknown binary. The main risk is data-flow integrity: Logstash access and authentication are mediated through Membrane, not direct Elastic endpoints, plus unpinned `npx @latest` execution adds supply-chain risk.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Apr 29, 2026, 05:41 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flogstash%2F@05334965e521ebd8f092548dafe27b03c18764ad