skills/cold-iq/coldiq-s-gtm-skills/list-building-tips/Socket

list-building-tips

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s purpose aligns with its ColdIQ-centric list-building workflow, and the domains appear same-org, so there is no strong evidence of malware. Risk comes from the mutable npx @latest install and credential forwarding into an externally fetched MCP package that could not be fully verified from the provided evidence.

Confidence: 80%Severity: 52%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:39 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Flist-building-tips%2F@a62bccbc66bc97e5f7f88f962f34a6be33c533238c993cfa6e616feddeed14a0