email-sender
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core email-sending capability fits the stated purpose, and there is no notable installer malware pattern. However, the skill reads a local secret file, authenticates a fixed third-party mailbox instead of the user's own account, and enables autonomous outbound email/file sending. The main concern is credential and data routing through an unverified shared sender identity, not overt malware.
Confidence: 85%Severity: 74%
Audit Metadata