skills/swan-gtm/gtm-skills/inbox-zero/Socket

inbox-zero

Warn

Audited by Socket on Jul 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose matches inbox triage, but the skill grants broad cross-system access and permits autonomous state-changing actions on untrusted inbound content. The biggest risks are prompt-injection-driven misclassification/actions and unclear trust boundaries around the referenced Swan/internal agent tooling, not confirmed malware.

Confidence: 87%Severity: 79%

Audit Metadata

Analyzed At

Jul 28, 2026, 04:40 PM

Package URL

pkg:socket/skills-sh/swan-gtm%2Fgtm-skills%2Finbox-zero%2F@67951445751e436ad3e8418130da012467c9e3022fa8606f9de75bf7e7d057a9