postmark-automation
Warn
Audited by Socket on Mar 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly aligned with Postmark automation and uses a plausibly official hosted MCP service, but it routes credentials and message data through a third-party intermediary and enables real-world email sending/config changes. Main concern is intermediary data flow and action impact, not overt malware or deceptive installation.
Confidence: 87%Severity: 56%
Audit Metadata