lead-enrichment
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill's purpose is coherent, and Hunter/Sixtyfour usage looks legitimate for lead enrichment, but all activity is funneled through an unverified orth CLI. That unresolved intermediary trust, combined with likely forwarding of API credentials and lead PII, creates high security risk despite only moderate evidence of malicious intent.
Confidence: 86%Severity: 82%
Audit Metadata