sharecrm

Warn

Audited by Socket on May 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are mostly coherent for a CRM CLI integration, and its confirmation rules are reasonable. The main issue is install and execution trust: the agent is told to install and authenticate into an external `sharecrm` binary whose official public distribution was not verified from the available evidence, so the binary remains a significant trust and credential-forwarding risk.

Confidence: 80%Severity: 72%
Audit Metadata
Analyzed At
May 8, 2026, 04:16 AM
Package URL
pkg:socket/skills-sh/emengs%2Fsharecrm-cli-skills%2Fsharecrm%2F@0decc44d8e66886f7af76e1c78d88df186d7dbcb