lead-intelligence

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core capabilities largely match its stated lead-intelligence purpose and mostly use official services, but it asks for broad social-platform credentials, including high-sensitivity X secrets and an optional LinkedIn cookie. Data flows appear generally direct rather than covert, so this is not confirmed malware, but the credential scope and untrusted-content processing make it a medium-risk skill.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Mar 31, 2026, 07:16 PM
Package URL
pkg:socket/skills-sh/affaan-m%2Feverything-claude-code%2Flead-intelligence%2F@7f48e8ca32038be00724fa83d25ac80a9bd1717b