acymailing

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose is plausible and the CLI install path is vendor-consistent, but the actual data flow is routed through Membrane rather than directly to AcyMailing. That third-party mediation of authentication, requests, and possible logs is a meaningful integrity and privacy risk disproportionate to a straightforward AcyMailing skill, though there is no clear evidence of malware or obfuscation.

Confidence: 82%Severity: 62%
Audit Metadata
Analyzed At
Apr 22, 2026, 09:07 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Facymailing%2F@47a901e30fdc5b2ce2026b0dddd1348dbe41d53c