skills/cold-iq/coldiq-s-gtm-skills/linkedin-ads-measurement/Socket

linkedin-ads-measurement

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s main purpose is coherent, but it mixes a LinkedIn measurement guide with an optional external ColdIQ gateway and unpinned MCP install. The biggest risks are remote-code execution via `npx @latest`, forwarding an API key into a CLI package, and routing attribution data through a third-party marketplace layer rather than only direct platform integrations.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:40 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Flinkedin-ads-measurement%2F@01e146fee5ee603d5c6c70c8fd482f5da104e417116c59fe7a93f48cf3066c8d