skills/cold-iq/coldiq-s-gtm-skills/gtm-philosophy/Socket

gtm-philosophy

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS leaning but not malicious: the skill’s main content is benign GTM guidance, yet it embeds optional ColdIQ installation and credentialed API/MCP usage. Risks are driven by unpinned `npx` execution and routing data through ColdIQ’s intermediary platform, not by overtly malicious behavior.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:38 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Fgtm-philosophy%2F@09e2ba8a80c1dbe06c8a9cef1557f28062e4962133af85ec520ee55484517c2d