emailoctopus
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent as an EmailOctopus integration, and the CLI install source appears legitimate, but it routes authentication and API traffic through Membrane rather than directly to EmailOctopus. That intermediary data flow is clearly disclosed yet still expands trust scope and creates moderate security risk versus a direct official API integration.
Confidence: 86%Severity: 58%
Audit Metadata