linkedin-ads-optimization

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the @coldiq/mcp package from the public NPM registry. This package is owned by the skill's author (Cold-IQ) and is used to provide the intended advertising research capabilities.
  • [COMMAND_EXECUTION]: The instructions provide a shell command for users to connect the Cold-IQ MCP using npx. This is a standard setup procedure for this vendor's tools.
  • [DATA_EXFILTRATION]: The skill identifies api.coldiq.com as the marketplace endpoint for fetching ad intelligence data. As this is the vendor's own infrastructure, this is considered functional data retrieval rather than exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 06:37 PM
Security Audit — agent-trust-hub — linkedin-ads-optimization