bridgebound-symptoms-11

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core content is a benign sales/marketing taxonomy, but it also pushes users toward installing and running an external MCP package with a mutable `@latest` tag and forwarding an API key to it. Data flows are mostly consistent with the stated ColdIQ integration, yet the execution/install trust and credential-forwarding footprint are broader than a simple reference skill and warrant caution.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 22, 2026, 06:38 PM
Package URL
pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Fbridgebound-symptoms-11%2F@18c25e7e2fbf2406c6b564ccc55be241db1149c6b4a52f56c5d7ccc70571f969
Security Audit — socket — bridgebound-symptoms-11