linkedin-campaign-complete

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s core purpose is coherent, but it adds medium trust risk by instructing execution of an unpinned external MCP package and forwarding a live API key into ColdIQ’s brokered data platform. Data flows match the stated outreach-research purpose, yet the mutable install path and third-party credential forwarding make it riskier than a pure documentation skill.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Jul 22, 2026, 06:39 PM
Package URL
pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Flinkedin-campaign-complete%2F@cd5aeba49429f739b13b07868a713459689bf93ecad018dc6f6d1274b43552da
Security Audit — socket — linkedin-campaign-complete