linkedin-campaign-complete

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s core purpose is coherent, but it adds medium trust risk by instructing execution of an unpinned external MCP package and forwarding a live API key into ColdIQ’s brokered data platform. Data flows match the stated outreach-research purpose, yet the mutable install path and third-party credential forwarding make it riskier than a pure documentation skill.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Aug 14, 2026, 05:22 AM
Package URL
pkg:socket/skills-sh/cold-iq%2Fcoldiq-s-gtm-skills%2Flinkedin-campaign-complete%2F@f0d49ffb38b19d01697d0cdff3ae826a89169f7c9873cb5eaa46a9b38acd7fd3
Security Audit — socket — linkedin-campaign-complete