n8n-crm-automation

SUSPICIOUS. The skill's CRM automation purpose is broadly coherent, but it pushes a third-party ColdIQ enrichment layer first and instructs unpinned `npx` execution of an MCP package that receives an API key. Data flows to first-party ColdIQ endpoints appear disclosed and same-brand, so this is not confirmed malware, but the install-trust and credential-forwarding footprint is higher than necessary for a CRM workflow guide.