get-qualified-leads-from-luma
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The overall workflow is coherent for lead generation, but it relies on third-party scraping and an intermediary MCP to handle external service access, while collecting and exporting attendee personal data at scale. Slack webhook posting is official and expected, but the non-official Luma extraction path and third-party routing raise medium security risk rather than clear malicious intent.
Confidence: 88%Severity: 61%
Audit Metadata