skills/cold-iq/coldiq-s-gtm-skills/atl-messaging/Socket

atl-messaging

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's messaging purpose is coherent, and the network destination aligns with the stated ColdIQ service, but it expands from writing assistance into prospect enrichment and asks users to run an unpinned `npx` MCP package while forwarding an API key to that runtime code. This is a medium supply-chain and credential-forwarding risk, not confirmed malware.

Confidence: 81%Severity: 62%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:39 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Fatl-messaging%2F@ff7b37d34621de1b00d628731341bb0c9fd631d9dc9ed2b6c6437fd6afab893b