copywriting
Warn
Audited by Socket on Jul 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the copywriting purpose is mostly coherent, but the skill’s footprint extends into third-party lead enrichment and email verification, and it recommends executing an unpinned MCP package whose official provenance was not verified. The official ColdIQ domains reduce concern, but the combination of external package execution, API-key forwarding, and brokered data routing makes this higher risk than a normal documentation skill.
Confidence: 83%Severity: 74%
Audit Metadata