Mailchimp Automation
Warn
Audited by Socket on Oct 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s stated capabilities align with Mailchimp marketing workflows, but the backend trust and data-flow story is incomplete: account actions are routed via an unverified generic MCP server name rather than a clearly official Mailchimp action endpoint. There is no direct evidence of malware or hidden execution, yet the ambiguity around where credentials and customer data actually flow makes this higher-risk than a normal documentation-only skill.
Confidence: 83%Severity: 59%
Audit Metadata