skills/cold-iq/coldiq-s-gtm-skills/bridgebound-firmographic-15/Socket

bridgebound-firmographic-15

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are mostly aligned for sales prospecting, and the API endpoints appear first-party to ColdIQ. Risk comes from the unpinned `npx @latest` MCP install and credential forwarding to that package without fully verified package provenance in the provided evidence.

Confidence: 80%Severity: 56%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:38 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Fbridgebound-firmographic-15%2F@df2188daa08ef3b0eef021ec77c62d97b15f216260de3c0309c9827d5ced23bd