skills/sales-skills/sales/sales-proton-mail/Socket

sales-proton-mail

Warn

Audited by Socket on Jul 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core Proton Mail help behavior is coherent and low-risk, but the skill is not Proton-published and embeds repeated transitive skill-install instructions via an unpinned third-party `npx skills` CLI. Main concern is supply-chain and inherited trust, not credential theft or direct exfiltration.

Confidence: 89%Severity: 63%

Audit Metadata

Analyzed At

Jul 13, 2026, 08:26 AM

Package URL

pkg:socket/skills-sh/sales-skills%2Fsales%2Fsales-proton-mail%2F@91e3b3043def792018e35d19b1b0425b68f71dccc6bc4f6e57ad1d610efbd1d3