find-contacts

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to download and execute an MCP package using npx -y @coldiq/mcp@latest from the npm registry. This is the official tool provided by the skill's author, Cold-IQ.
  • [COMMAND_EXECUTION]: The skill suggests a shell command for connecting the Cold-IQ MCP (COLDIQ_API_KEY=<key> npx -y @coldiq/mcp@latest). This command is used to set an environment variable and run a vendor-specific package.
  • [SAFE]: All external URLs (api.coldiq.com, coldiq.com) and packages (@coldiq/mcp) are verified as resources owned and managed by the skill's author (Cold-IQ). The provided boolean search formulas and strategy guides for Sales Navigator and Clay are standard industry practices for lead generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 06:37 PM
Security Audit — agent-trust-hub — find-contacts