skills/clawlink-hq/skills/attio/Socket

attio

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's CRM purpose is plausible, but it depends on a third-party hosted gateway and CLI that store credentials and proxy Attio access instead of using Attio's official API directly. The scope is somewhat proportionate, yet the intermediary credential and data flow through ClawLink materially raise trust and security risk.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:43 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fattio%2F@48b4774e9eaa6f09bf4afa431e9694bf8c52f2c29ce15f3f0e9c9e12174c6789