event-room-intelligence

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose matches a sales-event intelligence workflow, but the skill’s real footprint is heavy: bulk PII enrichment, live CRM access, and person-level verification through unspecified external services. There is no malicious installer or overt exfiltration endpoint, so this is not confirmed malware, but the undefined profile/company lookup providers create medium-high data-handling and credential-forwarding risk.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Sep 21, 2026, 03:49 PM
Package URL
pkg:socket/skills-sh/swan-gtm%2Fgtm-skills%2Fevent-room-intelligence%2F@5314690c92b0d1a9ade170da11ba3dbf6717d5ede15308040cedd2ca9cc3b24c
Security Audit — socket — event-room-intelligence