Quickmailio

• Outcome: Review
• Latest audit: May 29, 2026 at 9:37 PM UTC
• Version:
  1.0.2

Overview

This appears to be a legitimate QuickMail.io integration, but it gives broad authenticated access that can change or delete business data without clear confirmation guardrails.

Install only if you trust Membrane and need an agent to work with QuickMail.io. Use a dedicated or least-privilege QuickMail account where possible, review connection scopes, and require explicit confirmation before any campaign, user, prospect, or DELETE/POST/PUT/PATCH operation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly documents a generic proxy mechanism that supports mutating methods like POST, PUT, PATCH, and DELETE against the QuickMail.io API, but it does not require confirmation or warn that these calls can alter or delete production data. In an agent setting, this increases the chance of unintended state-changing actions being performed from vague or misinterpreted user requests.

VirusTotal

65/65 vendors flagged this skill as clean.