email-sender

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s capabilities are mostly consistent with its stated purpose, but that purpose itself includes high-impact outbound data transfer and local credential storage. The main risks are emailing arbitrary local folders externally and forwarding SMTP credentials to any configured server; there is no evidence of malicious installer behavior or hidden exfiltration beyond the declared email-sending function.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Mar 18, 2026, 02:04 PM
Package URL
pkg:socket/skills-sh/4444zyf%2Fskills%2Femail-sender%2F@edf63c513247c00b84ff44116511ab52c093429f