sendinblue
Warn
Audited by Socket on Apr 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities mostly match its stated Sendinblue purpose, and the Membrane CLI install path appears to be official npm-based tooling rather than malware distribution. However, all Sendinblue access and authentication are mediated through Membrane, not directly to official Sendinblue endpoints, creating a third-party proxy/data-flow concern and elevated trust requirement. This looks more like a managed gateway integration than a direct Sendinblue skill; risky but not clearly malicious.
Confidence: 85%Severity: 56%
Audit Metadata