skills/membranedev/application-skills/sendowl/Socket

sendowl

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly coherent for SendOwl automation, and its CLI install path is official npm-based rather than a classic malware installer. However, all authentication and data access are funneled through Membrane as an intermediary, creating meaningful third-party credential/data exposure and moderate security risk that exceeds a direct SendOwl-only integration.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Apr 30, 2026, 08:43 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsendowl%2F@00a9452889a6ee5416ef658152db33bd356bdf31