n8n-crm-automation

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's base CRM purpose is legitimate, but it steers users toward a ColdIQ-first architecture that adds third-party data routing and credential forwarding not required for ordinary n8n CRM automation. The main concern is proportion and trust expansion: runtime `npx` execution of external MCP code plus sending lead data and API credentials to ColdIQ instead of relying only on official CRM integrations.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Sep 2, 2026, 08:56 AM
Package URL
pkg:socket/skills-sh/cold-iq%2Fcoldiq-s-gtm-skills%2Fn8n-crm-automation%2F@222c86476d435a922de12829e5224c08c93b2a2c9599e617941ac0cbfa4f930c
Security Audit — socket — n8n-crm-automation