resend
Fail
Audited by Socket on Mar 1, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
The Resend inbound-email CLI described is coherent with its purpose of read-only access to emails, attachments, and domain metadata. Authentication via RESEND_API_KEY is standard. Data flows involve environment-based credentials and API interactions with outputs to stdout, which is acceptable if sensitive payloads are carefully redacted in verbose modes. Overall, no malicious activity is evident; primary concerns center on credential handling and potential inadvertent data exposure through stdout/logs in deployments.
Confidence: 95%Severity: 90%
Audit Metadata