lead-intelligence

Warn

Audited by Socket on Jul 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core capabilities largely match its stated lead-intelligence purpose and mostly use official services, but it asks for broad social-platform credentials, including high-sensitivity X secrets and an optional LinkedIn cookie. Data flows appear generally direct rather than covert, so this is not confirmed malware, but the credential scope and untrusted-content processing make it a medium-risk skill.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Jul 4, 2026, 07:08 PM
Package URL
pkg:socket/skills-sh/bhpb864dp9-ux%2Fmainaxiomloom-research%2Flead-intelligence%2F@270c1eb1c37525aea69e3d74b94b02be293a64aaa6f08aec282e39eb297e73f5