skills/apolloio/apollo-mcp-plugin/enrich-lead/Socket

enrich-lead

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose and Apollo-oriented capabilities are broadly aligned, and no malicious installer or obvious exfiltration logic is present. Risk comes from routing sensitive lead data and enriched personal details through an MCP connector whose provenance is not established in the skill, plus the explicit request to reveal personal emails.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 12, 2026, 08:35 PM

Package URL

pkg:socket/skills-sh/apolloio%2Fapollo-mcp-plugin%2Fenrich-lead%2F@aea2ad36110ab3fc43f9adea2272e1fb121915abcf331722350a9425ce73eaf9