email

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is purpose-aligned with email operations and the StableEmail/AgentCash ecosystem appears documented, but it relies on executing an unpinned external CLI and authorizes real-world paid actions plus outbound email sending. Data flows are mostly coherent with the stated purpose, with the main risks being mutable install trust, credential/payment authority delegated to AgentCash, and autonomous external actions.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Mar 14, 2026, 04:50 PM
Package URL
pkg:socket/skills-sh/Merit-Systems%2Fagentcash-skills%2Femail%2F@7ff6839e6dc696dd97e94b4a8f661004ee30aa50