account-selection

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS-leaning but not malicious: the skill's purpose, capabilities, and data flows are mostly coherent for ABM account selection, and the API endpoint appears official. The main risk is install trust and credential forwarding through an unpinned npx-launched MCP package whose exact first-party install provenance was not clearly verified in the provided evidence.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 22, 2026, 06:41 PM
Package URL
pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Faccount-selection%2F@bc6e227828e34035ab107caf7545fdbadfc35b562528294d298596947bc1731d
Security Audit — socket — account-selection