chrome-extension-prospecting

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core advisory content is benign and aligned with sales prospecting, but the skill also installs a third-party remote MCP integration. The endpoint appears to be officially operated by ManyPI and documented, so this is not confirmed malware; however, it creates medium risk through transitive trust and external data routing to a hosted service unrelated to the browser extensions the skill primarily describes.

Confidence: 88%Severity: 52%
Audit Metadata
Analyzed At
Sep 8, 2026, 07:12 PM
Package URL
pkg:socket/skills-sh/manypicom%2Flead-gen-channels%2Fchrome-extension-prospecting%2F@feb79e048d813f646035142c91caf0a444d641052d7905569ccce7305ca4a91a