skills/cold-iq/coldiq-s-gtm-skills/n8n-clay-integration/Socket

n8n-clay-integration

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core Clay+n8n guidance is plausible, but the skill disproportionately promotes ColdIQ and asks users to run an unpinned external MCP package with an API key. ColdIQ's official domain/API are consistent, yet the exact npm package provenance was not verified from the evidence, making the credential-forwarding path the main risk.

Confidence: 84%Severity: 84%

Audit Metadata

Analyzed At

Jul 22, 2026, 06:40 PM

Package URL

pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Fn8n-clay-integration%2F@284390dba05e546db02d5bc1565f6d3427580943a8201ea4021f7f51e5990b03