instantly-api
Warn
Audited by Socket on Jun 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose broadly matches cold-email campaign management, but its core integration routes data and likely credentials through ColdIQ proxy endpoints rather than Instantly’s official API. There is no malware or installer behavior, yet the third-party gateway model and real-world campaign activation make the skill medium risk.
Confidence: 100%Severity: 60%
Audit Metadata