Warn
Audited by Socket on Mar 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is purpose-aligned with email operations and the StableEmail/AgentCash ecosystem appears documented, but it relies on executing an unpinned external CLI and authorizes real-world paid actions plus outbound email sending. Data flows are mostly coherent with the stated purpose, with the main risks being mutable install trust, credential/payment authority delegated to AgentCash, and autonomous external actions.
Confidence: 84%Severity: 58%
Audit Metadata