skills/cold-iq/coldiq-s-gtm-skills/cold-email-templates-34/Socket

cold-email-templates-34

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s overall purpose is coherent, but it mixes a benign template library with instructions to install and run an unpinned external MCP package and forward an API key to it. Data flows to official ColdIQ endpoints are plausible and proportionate, so this is not confirmed malware, but install trust and credential-forwarding concerns make the skill medium risk.

Confidence: 83%Severity: 61%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:38 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Fcold-email-templates-34%2F@bac7923790b69ae198c3e292b2abe745b997f7d27dce4b70603273920a25cb75