process-email-bookmarks

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: the skill’s purpose broadly matches its actions, but its footprint includes medium-risk trust and data-flow issues. The main concerns are reliance on a third-party Gmail CLI for mailbox access and processing untrusted email/web content while also writing to local knowledge-base files and changing Gmail state.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:40 PM
Package URL
pkg:socket/skills-sh/maroffo%2Fclaude-forge%2Fprocess-email-bookmarks%2F@a85a927a0fec42345a622e07b76d85f707e425ec