linkedin-ads-copy
Warn
Audited by Socket on Jul 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is mostly coherent, and the ColdIQ API domain appears same-org and relevant to audience/ad research. But the skill expands into remote tool installation via unpinned `npx -y @coldiq/mcp@latest` and forwards an API key into that fetched package, creating medium supply-chain and credential-forwarding risk disproportionate to a simple copywriting guide.
Confidence: 82%Severity: 56%
Audit Metadata