skills/mnhkahn/cyeam-cli/mail/Socket

mail

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose matches email operations, and the network targets are proportionate, but the skill's real trust boundary is an external `cyeam` CLI that receives mailbox credentials and can send mail on the user's behalf. Because the CLI's provenance is not clearly verifiable from the skill content, the supply-chain and credential-forwarding risks are significant.

Confidence: 82%Severity: 81%

Audit Metadata

Analyzed At

Sep 3, 2026, 03:42 PM

Package URL

pkg:socket/skills-sh/mnhkahn%2Fcyeam-cli%2Fmail%2F@20092c3c5f79c41c8147cd33e566e0d8a5a2b0c78573f87e40565facb8f14ae5