Mailchimp Automation

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated capabilities align with Mailchimp marketing workflows, but the backend trust and data-flow story is incomplete: account actions are routed via an unverified generic MCP server name rather than a clearly official Mailchimp action endpoint. There is no direct evidence of malware or hidden execution, yet the ambiguity around where credentials and customer data actually flow makes this higher-risk than a normal documentation-only skill.

Confidence: 83%Severity: 59%
Audit Metadata
Analyzed At
Oct 23, 2026, 12:25 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fmailchimp-automation%2F@331984139da3faf92d99fc0f4e998cc9c3c226abed8fcb4c3e9bc249b09570c0