okta

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated Okta management purpose is plausible, and the CLI install source appears official, but the actual data flow is through Membrane rather than directly to Okta. That adds a third-party credential and data intermediary for sensitive identity-management operations, which is broader than necessary and raises medium security risk without proving malicious intent.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 12:03 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fokta%2F@e81e468c926d91a52dd73d215c3529a1c050cb29a663705703e43413634b836a
Security Audit — socket — okta