skills/victor-shulga/ai-native-outreach-skills/persona-builder/Socket

persona-builder

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the persona-building purpose is coherent, but the skill relies on an unspecified 'LinkedIn via MCP' integration with no verifiable publisher, install source, credential path, or endpoint disclosure. The main risk is unclear third-party data and credential routing, not confirmed malware.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Oct 19, 2026, 07:36 AM

Package URL

pkg:socket/skills-sh/victor-shulga%2Fai-native-outreach-skills%2Fpersona-builder%2F@b094531a64ef8eab93f9b4a70aa8f81b4311a5b07f0eabf2df36b107e7ee4a0e