new-relic

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Membrane-based New Relic integration, and the CLI install path appears legitimate, but it proxies authentication and all New Relic operations through a third-party service rather than official New Relic endpoints. That intermediary trust model, plus dynamic action creation and mutable CLI install, makes the skill medium risk even without clear evidence of malware.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:43 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fnew-relic%2F@23ea6e4be0c30b7883ebffa600369057d4ae7f9b