data-import

Warn

Audited by Socket on May 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's overall purpose is coherent for a data importer, and the explicit approval gate is a positive control. However, it routes sensitive CRM/email/contact data through unspecified MCP servers and references an unverifiable local script, so install/data-flow trust is incomplete and broader than ideal for a universal import skill.

Confidence: 83%Severity: 63%
Audit Metadata
Analyzed At
May 20, 2026, 12:42 AM
Package URL
pkg:socket/skills-sh/indranilbanerjee%2Fdigital-marketing-pro%2Fdata-import%2F@4c894e78e75fe24f41ff87d2c0cc61d04244b01b
Security Audit — socket — data-import