email-infra

Warn

Audited by Socket on Jun 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with its stated cold-email infrastructure purpose, but it channels sensitive mailbox provisioning and analytics through ColdIQ intermediary endpoints rather than Instantly's clearly documented official API. With no install/execution behavior, malware likelihood is low; the main risk is third-party credential/data forwarding and limited public verifiability of the proxy endpoints.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 15, 2026, 03:03 PM
Package URL
pkg:socket/skills-sh/Cold-IQ%2Fcoldiq-marketplace-skills%2Femail-infra%2F@3173bb4be5c4ac6ecdd7800a514105d8fab3629eef3d7856cfedda60f810a6ce
Security Audit — socket — email-infra