skills/membranedev/application-skills/smtp2go/Socket

smtp2go

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is coherent as an SMTP2GO integration, but it routes authentication and API traffic through Membrane rather than directly to SMTP2GO. Install trust is moderate because the CLI comes from the official npm registry, yet the intermediary proxy and credential forwarding increase security risk beyond a direct API integration.

Confidence: 84%Severity: 57%

Audit Metadata

Analyzed At

Apr 2, 2026, 08:33 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fsmtp2go%2F@448457cfd85ab433692f631b01d4baa36b62dcc4