capsule-crm

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a ClawLink-based Capsule connector, and the CLI provenance appears same-org and official, but the core design routes CRM auth and data through ClawLink rather than direct Capsule endpoints. That third-party mediation and credential dependence create medium-high security risk even without clear malicious intent.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Jun 28, 2026, 02:44 PM
Package URL
pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fcapsule-crm%2F@772c49d391f15265f1f54768a88c36949eadaf740ce0c6076cf2f3f4acc9af21
Security Audit — socket — capsule-crm