mmk-paymint-bulk-resend

Warn

Audited by Socket on Mar 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill's functional scope is narrow and aligned with bulk SMS resend, but it depends on an `mmk` CLI whose provenance is not publicly verifiable from the supplied evidence. Because shared auth likely feeds credentials into that binary, this is best classified as suspicious/high-risk supply-chain exposure rather than confirmed malware.

Confidence: 81%Severity: 82%
Audit Metadata
Analyzed At
Mar 26, 2026, 06:03 AM
Package URL
pkg:socket/skills-sh/magic-meal-kits%2Fmmk-skills%2Fmmk-paymint-bulk-resend%2F@f28106f82460358465b8ca70b0ed51f80af98d5c