skills/membranedev/application-skills/reachmail/Socket

reachmail

Warn

Audited by Socket on May 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install source is legitimate and same-publisher, but the skill's actual data flow is a third-party Membrane gateway for ReachMail operations. Requiring a Membrane account, routing auth and action data through Membrane, and enabling broad remote actions make the footprint broader than a direct ReachMail integration, though not clearly malicious.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

May 5, 2026, 05:18 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Freachmail%2F@043a7947957527ddd042ab008c434bc542b6a025