skills/membranedev/application-skills/reachmail/Socket

reachmail

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the install source is legitimate and same-publisher, but the skill's actual data flow is a third-party Membrane gateway for ReachMail operations. Requiring a Membrane account, routing auth and action data through Membrane, and enabling broad remote actions make the footprint broader than a direct ReachMail integration, though not clearly malicious.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Apr 22, 2026, 07:49 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Freachmail%2F@325ad9c9c9ae6b3e376179cf5a3e63af63597a57