follow-up
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and execute the vendor's official MCP server using
npx -y @coldiq/mcp@latest. These are legitimate vendor resources used for skill functionality. - [REMOTE_CODE_EXECUTION]: Shell command patterns are provided for setting up the environment via
npx. This is directed at the user for configuration and is consistent with the skill's purpose. - [COMMAND_EXECUTION]: Instructions include terminal commands for environment variable configuration and tool initialization (
COLDIQ_API_KEY=<key> npx -y @coldiq/mcp@latest). - [DATA_EXFILTRATION]: The skill references the vendor's official API marketplace and endpoints at
api.coldiq.comfor data enrichment tasks like finding signals and verifying emails.
Audit Metadata