pipedrive

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core CRM functionality matches the stated purpose, and install methods are documented rather than overtly malicious. However, the skill is not a direct Pipedrive integration: it brokers CRM data and likely credentials through AgentPMT, instructs transitive installation of other skills, and can create arbitrary outbound webhooks that relay CRM events. Those intermediary data flows and extended trust make the footprint broader than a simple Pipedrive skill.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Jun 24, 2026, 10:05 AM
Package URL
pkg:socket/skills-sh/AgentPMT%2Fagent-skills%2Fpipedrive%2F@403d6f4f77f46d3ab65af0681315217c8d2f46d1804712e5174457e0a5a841c8