churn-winback-leadgen

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core lead-gen guidance is benign and coherent, but the skill asks the agent/user to extend trust to a third-party remote MCP service. The data flow to ManyPI is proportionate to account research and appears same-org/official, so this is not malicious; however, MCP addition is a transitive trust and external data-sharing risk that makes the skill medium risk overall.

Confidence: 89%Severity: 53%
Audit Metadata
Analyzed At
Sep 8, 2026, 07:10 PM
Package URL
pkg:socket/skills-sh/manypicom%2Flead-gen-channels%2Fchurn-winback-leadgen%2F@2bece9be6e56f2a08d3c03a1946f9849feea5811a8ff4ff35595433da9ad92dd