emailoctopus

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as an EmailOctopus integration, and the CLI install source appears legitimate, but it routes authentication and API traffic through Membrane rather than directly to EmailOctopus. That intermediary data flow is clearly disclosed yet still expands trust scope and creates moderate security risk versus a direct official API integration.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Apr 22, 2026, 02:43 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Femailoctopus%2F@049e438da817eef1bef0f337bc10dff2b9a9e228