brevo
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's basic read-only Brevo browsing purpose is plausible, but the real data flow is through an unofficial third-party service that receives OAuth/API credentials and mediates all access instead of calling Brevo directly. Install trust is moderate because the endpoint is same-org documented and publicly linked, but scope and data-flow are broader than the simple 'view brevo.com' framing.
Confidence: 90%Severity: 62%
Audit Metadata