skills/cold-iq/coldiq-s-gtm-skills/linkedin-ads-audiences/Socket

linkedin-ads-audiences

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s marketing-audience purpose is coherent, but it pushes users toward an unpinned third-party MCP install and forwards an API key into externally fetched code whose exact package provenance was not verified. This is mainly a supply-chain and credential-forwarding risk, not confirmed malicious behavior.

Confidence: 82%Severity: 84%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:39 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Flinkedin-ads-audiences%2F@a7c705b598acc977c7c14cdbd231e0465c79bd64d0255fdbb2ebf60cb2599a32