pipedrive
Warn
Audited by Socket on Jun 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core CRM functionality matches the stated purpose, and install methods are documented rather than overtly malicious. However, the skill is not a direct Pipedrive integration: it brokers CRM data and likely credentials through AgentPMT, instructs transitive installation of other skills, and can create arbitrary outbound webhooks that relay CRM events. Those intermediary data flows and extended trust make the footprint broader than a simple Pipedrive skill.
Confidence: 86%Severity: 68%
Audit Metadata