brevo

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's basic read-only Brevo browsing purpose is plausible, but the real data flow is through an unofficial third-party service that receives OAuth/API credentials and mediates all access instead of calling Brevo directly. Install trust is moderate because the endpoint is same-org documented and publicly linked, but scope and data-flow are broader than the simple 'view brevo.com' framing.

Confidence: 90%Severity: 62%
Audit Metadata
Analyzed At
Sep 28, 2026, 10:57 AM
Package URL
pkg:socket/skills-sh/unbrowse-ai%2Fsites%2Fbrevo%2F@24e23bb835c6b5ec54722fab9c90d9d4f5e358038a97afef0a53c94062f86444