skills/membranedev/application-skills/nginx/Socket

nginx

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is not overtly malicious and uses an official npm-hosted first-party CLI, but its real footprint is a Membrane platform integration more than a direct NGINX skill. The main concern is data-flow integrity: NGINX interactions and possibly credentials are brokered through Membrane, a third-party intermediary, and installs are unpinned via `@latest`.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Apr 28, 2026, 11:42 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fnginx%2F@1fce838d51da11a6b050472c67423dd94acef7b3