acumbamail

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's capabilities generally match an Acumbamail integration, and the CLI comes from an official npm package, so this is not confirmed malware. However, the integration is materially mediated by Membrane rather than Acumbamail directly, with server-side credential handling and broad action capability, so the trust footprint is larger than the stated single-service purpose suggests.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 03:19 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Facumbamail%2F@79ae99b20f7c77ceba5a1f55d3803dc1f4e67ea4