email

Warn

Audited by Socket on Mar 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s core capabilities match its stated purpose, but it has a meaningful security footprint: third-party CLI installation, plaintext password storage, possible TLS-verification bypass, and autonomous email sending/receiving. This looks like a legitimate email-management skill with medium-to-high operational risk rather than confirmed malware.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Mar 16, 2026, 12:26 PM
Package URL
pkg:socket/skills-sh/lyhue1991%2Femail-cli%2Femail%2F@abde8ecc1bcf30d7f4e5c67936e0dec583bff306