clicksend-sms
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated ClickSend purpose is plausible, but its actual footprint depends on a third-party Membrane CLI and service that mediate authentication, data access, and message-sending instead of using ClickSend's official direct API. Install provenance is fairly consistent with the publisher and not overtly malicious, but the intermediary data flow and real-world action capability make the trust boundary broader than the description suggests.
Confidence: 85%Severity: 68%
Audit Metadata