Resend CLI
Warn
Audited by Socket on Jul 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capability matches the stated purpose and data appears to flow to the official Resend service, but the install instruction is inconsistent with the official CLI package name, creating supply-chain and execution-trust risk. The skill also enables autonomous outbound email actions, so it should only be used with explicit user approval for each send/broadcast.
Confidence: 90%Severity: 56%
Audit Metadata