ecommerce-store-prospecting
Warn
Audited by Socket on Sep 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core prospecting guidance is coherent and mostly limited to public web research, but the skill also instructs the agent to install a third-party hosted MCP server. That transitive trust and external data routing are proportionate to the use case yet materially increase risk, so this is not malicious but should be treated as a medium-risk third-party integration skill.
Confidence: 84%Severity: 64%
Audit Metadata