manageengine-servicedesk-plus-cloud

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent as a Membrane-based ManageEngine integration, and the CLI comes from an official npm package rather than an unverifiable binary. However, it routes authentication and API access through Membrane as an intermediary, creating medium data-flow and credential-forwarding risk that is broader than a direct official API integration.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 01:02 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fmanageengine-servicedesk-plus-cloud%2F@d2ac72bfd40deee94ed4e54b601567a13425aaf7
Security Audit — socket — manageengine-servicedesk-plus-cloud