sales-prospecting

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s business purpose is coherent, but its actual execution relies on an unverifiable `orth` intermediary that may receive both API credentials and prospect PII. Because install provenance and direct data flows are not established, the skill poses high supply-chain and credential-forwarding risk despite a plausible sales-prospecting use case.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:58 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Fsales-prospecting%2F@1c3ffd7c60b22e261f7a18dfe11cec936052af4c