outbound-prospecting-engine

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s sales-automation purpose matches its state management and outreach workflow, but it forwards a Bearer secret to a fully configurable remote URL and relies on transitive child-skill behavior for qualification and email sending. The main concern is remote state/API trust and autonomous outreach, not clear malware.

Confidence: 80%Severity: 61%
Audit Metadata
Analyzed At
Jun 19, 2026, 05:40 AM
Package URL
pkg:socket/skills-sh/marmikcfc%2Fpepper-skills%2Foutbound-prospecting-engine%2F@4a758d1e50967a0631492fab71e5c31f08ca69a9083ccc7b012da3402ceb9807
Security Audit — socket — outbound-prospecting-engine