expansion-signal-spotter
Warn
Audited by Socket on Mar 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core purpose is coherent, but the skill’s optional LinkedIn/job-monitoring path is under-specified and likely depends on unverifiable third-party scraping services that may receive customer/contact data and possibly LinkedIn session credentials. With no official install/provenance details for those tools, the skill carries high supply-chain and credential-forwarding risk despite otherwise plausible sales-ops functionality.
Confidence: 81%Severity: 82%
Audit Metadata