leadoku
Warn
Audited by Socket on May 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s core behavior is mostly coherent for a CRM integration, and the CLI comes from an official npm package, so this is not confirmed malware. However, all Leadoku access is mediated through Membrane rather than direct official APIs, creating third-party credential/data routing, and the documentation contains a notable mismatch (HubSpot docs in a Leadoku skill).
Confidence: 84%Severity: 55%
Audit Metadata