instantly-autoreply

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core behavior matches the stated purpose, and the named credentials map to official Instantly and Anthropic APIs. The main risks are autonomous outbound email sending and a campaign knowledge base that reportedly includes credentials, which is broader than necessary for reply generation and could expose sensitive data to the model pipeline.

Confidence: 84%Severity: 65%
Audit Metadata
Analyzed At
Mar 27, 2026, 12:42 AM
Package URL
pkg:socket/skills-sh/sanketkothiya2%2FHabitflow%2Finstantly-autoreply%2F@d238822ef2ab824af5996c5aa133ee9a5e06095d
Security Audit — socket — instantly-autoreply