skills/msapps-mobile/claude-plugins/enrich-lead/Socket

enrich-lead

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly fit lead enrichment, and the data flow appears aimed at official Apollo functionality, but the underlying MCP server that receives Apollo credentials is not identified or verified. Main risks are credential forwarding through an opaque third-party bridge and collection of sensitive personal-email data, not overt malware behavior.

Confidence: 82%Severity: 62%

Audit Metadata

Analyzed At

Apr 28, 2026, 01:40 PM

Package URL

pkg:socket/skills-sh/MSApps-Mobile%2Fclaude-plugins%2Fenrich-lead%2F@f51a10c24493035c8a0c0ae16549ac11ebdd7d5b