Lemlist Automation
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's capabilities fit Lemlist automation, but it routes authentication and outreach data through Composio's hosted MCP endpoint instead of Lemlist's own direct MCP service. This is a coherent third-party integration, not confirmed malware, but the intermediary credential/data flow and undisclosed trust-boundary shift make it medium risk.
Confidence: 88%Severity: 58%
Audit Metadata