Lemlist Automation

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's capabilities fit Lemlist automation, but it routes authentication and outreach data through Composio's hosted MCP endpoint instead of Lemlist's own direct MCP service. This is a coherent third-party integration, not confirmed malware, but the intermediary credential/data flow and undisclosed trust-boundary shift make it medium risk.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Oct 4, 2026, 02:16 AM
Package URL
pkg:socket/skills-sh/composiohq%2Fawesome-claude-skills%2Flemlist-automation%2F@b3766228c8e4325f38c6b2316f1bf526c2213ee4