email-sender

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core email-sending capability fits the stated purpose, and there is no notable installer malware pattern. However, the skill reads a local secret file, authenticates a fixed third-party mailbox instead of the user's own account, and enables autonomous outbound email/file sending. The main concern is credential and data routing through an unverified shared sender identity, not overt malware.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Apr 18, 2026, 01:12 AM
Package URL
pkg:socket/skills-sh/wulaosiji%2Fskills%2Femail-sender%2F@be758f8bc2fe19f2784981a25e3f46b422286577
Security Audit — socket — email-sender