Mailchimp Automation
Warn
Audited by Socket on Jun 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The Mailchimp-focused capabilities are coherent, but the skill’s operational footprint relies on an undocumented MCP intermediary that does not appear to be official Mailchimp infrastructure. That creates medium-high supply-chain and credential-forwarding risk, especially because Mailchimp keys are high-privilege and campaign sends/audience changes have real-world effects.
Confidence: 85%Severity: 79%
Audit Metadata