instantly-api

Warn

Audited by Socket on Jun 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose broadly matches cold-email campaign management, but its core integration routes data and likely credentials through ColdIQ proxy endpoints rather than Instantly’s official API. There is no malware or installer behavior, yet the third-party gateway model and real-world campaign activation make the skill medium risk.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 15, 2026, 03:03 PM
Package URL
pkg:socket/skills-sh/Cold-IQ%2Fcoldiq-marketplace-skills%2Finstantly-api%2F@925ddb156f236b734596d6bdfbd45428e97f4167be9b0cf077d369e5d0a2f7d8
Security Audit — socket — instantly-api