postmark-automation

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s Postmark capabilities match its stated purpose, and the Rube/Composio relationship appears official, so this is not overtly malicious. Risk comes from routing sensitive email operations and Postmark authentication through a hosted intermediary, outdated auth claims, and enabling autonomous outbound email/server changes without explicit approval controls.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
Apr 1, 2026, 07:30 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Fpostmark-automation%2F@2fc3399deee8ea06db53f8ff84b33144eb83b02f