oracle-eloqua

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities mostly align, and the Membrane CLI appears to be an official same-vendor tool distributed via npm. However, the integration routes authentication and Oracle Eloqua data through Membrane as an intermediary instead of Oracle's official API path, and it uses unpinned `@latest` installs/execution. This is not clearly malicious, but it introduces medium trust and data-flow risk that exceeds a direct Eloqua integration.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
May 1, 2026, 01:16 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Foracle-eloqua%2F@446e1742e1074b59548df843cdc3177edf676f7f