inbound-lead-enrichment

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s overall purpose matches lead enrichment, but its footprint is broader than a minimal enrichment workflow because it combines web research, unofficial LinkedIn scraping, stakeholder discovery, CRM relationship checks, and write-back actions. The main concerns are unclear third-party data routing, partially unverifiable vendors, and autonomous CRM updates—not confirmed malware.

Confidence: 84%Severity: 67%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:50 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Finbound-lead-enrichment%2F@e0be978a7b143050102c0e9d80079dd1f86679d1