skills/claude-office-skills/skills/Pipedrive Automation/Socket

Pipedrive Automation

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The business purpose is coherent, but the skill relies on an unspecified `crm-mcp` server whose provenance cannot be verified from the skill text, and it leaves credential/data routing for Pipedrive, Slack, and Google integrations unclear. No direct malware or exfiltration behavior is shown, but the unverifiable MCP dependency makes the install/execution trust high risk.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

Oct 25, 2026, 01:12 AM

Package URL

pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fpipedrive-automation%2F@9d31bbb95d183c0c66212899daca7c00f76e5f8d2ed5706b78a76be6c1d8ba11