logz-io

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is coherent as a Membrane-hosted integration, but not as a minimal direct Logz.io integration. Its main concern is data-flow integrity: Logz.io access, auth, and request metadata are routed through Membrane's CLI/service and proxy, with an unpinned external CLI install. This is not confirmed malware, but it introduces meaningful third-party trust and credential/data exposure beyond the stated Logz.io purpose.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Apr 28, 2026, 05:26 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Flogz-io%2F@9347ac3d5ce17c61604b8399567f5120cbb50c0f
Security Audit — socket — logz-io