skills/willsigmon/sigstack/Resend Expert/Socket

Resend Expert

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS. The skill’s capabilities and official data flows generally match its Resend email purpose, and dependency/install trust is low-risk. However, it embeds a live-looking Resend API key directly in the instructions, creating a severe credential exposure risk and enabling real-world email/account actions if used by the agent.

Confidence: 97%Severity: 86%

Audit Metadata

Analyzed At

Mar 18, 2026, 10:34 PM

Package URL

pkg:socket/skills-sh/willsigmon%2Fsigstack%2Fresend-expert%2F@e8ca66d7fb90fd6d26b61ba9055a0d32f03a77f8