lead-intelligence

Warn

Audited by Socket on Aug 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose and capabilities mostly align, and the skill does not include malware-like installers or obvious exfiltration endpoints. The main concerns are disproportionate credential scope for X write-context, optional LinkedIn cookie/session use instead of official auth, and moderate indirect prompt-injection risk from untrusted external content combined with action-capable tooling.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Aug 29, 2026, 02:13 PM
Package URL
pkg:socket/skills-sh/affaan-m%2Fecc%2Flead-intelligence%2F@542812bfc35f11c4cf44de43ca1eee04fd3cd110ae40d7b90d043f33305e66d5
Security Audit — socket — lead-intelligence