get-qualified-leads-from-luma

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall workflow is coherent for lead generation, but it relies on third-party scraping and an intermediary MCP to handle external service access, while collecting and exporting attendee personal data at scale. Slack webhook posting is official and expected, but the non-official Luma extraction path and third-party routing raise medium security risk rather than clear malicious intent.

Confidence: 88%Severity: 61%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:14 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fget-qualified-leads-from-luma%2F@7cc3c91bc1140e25ef770632852378be2e4d0baef15f3fc5c07a6feac18a90cc