skills/cold-iq/coldiq-s-gtm-skills/list-building-tips/Socket

list-building-tips

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s purpose aligns with its ColdIQ-centric list-building workflow, and the domains appear same-org, so there is no strong evidence of malware. Risk comes from the mutable npx @latest install and credential forwarding into an externally fetched MCP package that could not be fully verified from the provided evidence.

Confidence: 80%Severity: 52%

Audit Metadata

Analyzed At

Aug 14, 2026, 05:22 AM

Package URL

pkg:socket/skills-sh/cold-iq%2Fcoldiq-s-gtm-skills%2Flist-building-tips%2F@50c1bea59810c8ff402e0695e0a4ace361efc01b52d279915167cc527dd96dc9