mail

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated mailbox purpose is coherent, but the skill delegates every meaningful action to an unverifiable local `levmail` binary with no confirmed publisher, registry, or release provenance. There is no direct evidence of malware or credential theft in the skill text, yet the opaque executable creates a high trust and potential data-flow risk disproportionate to the minimal wrapper.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Jul 16, 2026, 04:48 PM
Package URL
pkg:socket/skills-sh/lev-os%2Fagents%2Fmail%2F@cc603d13e2295100907ef6620c3175907ae785441b5e4e1fa8c058fcb54828ae
Security Audit — socket — mail