email-sender
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s capabilities are mostly consistent with its stated purpose, but that purpose itself includes high-impact outbound data transfer and local credential storage. The main risks are emailing arbitrary local folders externally and forwarding SMTP credentials to any configured server; there is no evidence of malicious installer behavior or hidden exfiltration beyond the declared email-sending function.
Confidence: 88%Severity: 58%
Audit Metadata