prospect-360-b2b

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior matches a B2B research/reporting skill, but it expands trust via transitive skill installation, third-party service mediation, and optional browser automation over gated pages. No direct credential harvesting or covert exfiltration is evident, yet the install chain and untrusted-content processing make it higher risk than a simple documentation or local-only research skill.

Confidence: 88%Severity: 61%
Audit Metadata
Analyzed At
Apr 14, 2026, 11:08 PM
Package URL
pkg:socket/skills-sh/rafaelgrasa%2Fskills%2Fprospect-360-b2b%2F@cd4066736f0ceeea54240fe412a7e91cb29cc6f9