bulk-email-address-validation-neverbounce

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches bulk email verification, but the actual data flow routes both email lists and the user's NeverBounce credential through AgentPMT rather than directly to NeverBounce. This is disclosed and coherent with an AgentPMT-hosted integration, so it is not confirmed malware, but the intermediary credential/data handling and transitive skill installation make it a medium-risk skill.

Confidence: 85%Severity: 63%
Audit Metadata
Analyzed At
Jun 23, 2026, 09:16 PM
Package URL
pkg:socket/skills-sh/AgentPMT%2Fagent-skills%2Fbulk-email-address-validation-neverbounce%2F@e472dbaec617fbe7163f904a3b2d2d57bf066cddfb350a337f5f1ca7bb7e1b9c