sales-prospecting
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s business purpose is coherent, but its actual execution relies on an unverifiable `orth` intermediary that may receive both API credentials and prospect PII. Because install provenance and direct data flows are not established, the skill poses high supply-chain and credential-forwarding risk despite a plausible sales-prospecting use case.
Confidence: 87%Severity: 84%
Audit Metadata