reading-mailcatcher-api

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Anomaly
AnomalyLOW
references/manual-api-walkthrough.md

The fragment is a debugging guide, not executable package code. It directs users to retrieve and display sensitive email verification and login links from local Mailcatcher and includes destructive deletion commands. Its curl usage contradicts its stated tool restriction. No clear malware behavior is present, but follow the approved transport and protect extracted tokens; obtain confirmation before deletion.

Confidence: 98%Severity: 53%
Audit Metadata
Analyzed At
Oct 11, 2026, 05:39 PM
Package URL
pkg:socket/skills-sh/bitwarden%2Fai-plugins%2Freading-mailcatcher-api%2F@ced9694d7b030145ac56e184fa2eb3a3d97bb4740b7fef3123e5803c24f49b09