signal-sourcer

SUSPICIOUS. The skill’s purpose and capabilities are mostly coherent for website visitor tracking, and its stated API endpoint aligns with the vendor’s own domain. The main concern is install/execution trust: it asks the agent to auto-run an unpinned external MCP package whose exact provenance was not independently verified, while also passing an API key to that package. No direct malware, stealth, or clear exfiltration behavior is present in the skill text.

SUSPICIOUS: The business purpose and capabilities are mostly aligned, but the install path asks users to execute an unpinned external MCP package and pass it an API key without strong independently verified package provenance in the provided evidence. Data flows to ColdIQ are consistent with the stated purpose, so this is not clearly malicious, but supply-chain and credential-forwarding risk are material.