bridgebound-symptoms-11
Warn
Audited by Socket on Jul 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core content is a benign sales/marketing taxonomy, but it also pushes users toward installing and running an external MCP package with a mutable `@latest` tag and forwarding an API key to it. Data flows are mostly consistent with the stated ColdIQ integration, yet the execution/install trust and credential-forwarding footprint are broader than a simple reference skill and warrant caution.
Confidence: 82%Severity: 58%
Audit Metadata