n8n-crm-automation
Warn
Audited by Socket on Sep 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's base CRM purpose is legitimate, but it steers users toward a ColdIQ-first architecture that adds third-party data routing and credential forwarding not required for ordinary n8n CRM automation. The main concern is proportion and trust expansion: runtime `npx` execution of external MCP code plus sending lead data and API credentials to ColdIQ instead of relying only on official CRM integrations.
Confidence: 85%Severity: 74%
Audit Metadata