territory-and-list-splitting
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core guidance content is benign and aligned with its stated purpose, but it also instructs the user to connect a third-party remote MCP service. The endpoint appears legitimate and same-org with ManyPI, so this is not malware; however, the skill expands trust to a hosted external service that may receive prospecting data and possibly auth/session material. Risk is medium due to transitive remote-service trust and external data flow, not due to hidden execution or overtly malicious behavior.
Confidence: 89%Severity: 52%
Audit Metadata