n8n-workflow-design
Warn
Audited by Socket on Jul 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core design guidance is mostly coherent, and `api.coldiq.com` appears aligned with the stated vendor purpose, but the skill goes beyond architecture advice by steering users to run an unpinned external MCP package and pass it an API key without strong package-level provenance evidence. That makes the install/credential-forwarding footprint somewhat disproportionate to a workflow-design skill.
Confidence: 84%Severity: 72%
Audit Metadata