n8n-workflow-design

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core design guidance is mostly coherent, and `api.coldiq.com` appears aligned with the stated vendor purpose, but the skill goes beyond architecture advice by steering users to run an unpinned external MCP package and pass it an API key without strong package-level provenance evidence. That makes the install/credential-forwarding footprint somewhat disproportionate to a workflow-design skill.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 22, 2026, 06:40 PM
Package URL
pkg:socket/skills-sh/Cold-IQ%2FColdIQ-s-GTM-Skills%2Fn8n-workflow-design%2F@cb41f01aad0f8cd5b8a29cb81085fd89ea1814b9697e07165577d4603da771e4
Security Audit — socket — n8n-workflow-design