skills/mvanhorn/cli-printing-press/pp-learn-disabled-example/Socket

pp-learn-disabled-example

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s stated purpose is mostly coherent, but it depends on not-fully-verified downstream CLI/MCP binaries, forwards tokens into that installed CLI, and permits output delivery to arbitrary webhook endpoints. This is not confirmed malware, but the install trust chain and flexible outbound data flows make the skill medium-high risk.

Confidence: 85%Severity: 78%

Audit Metadata

Analyzed At

Sep 2, 2026, 11:54 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fcli-printing-press%2Fpp-learn-disabled-example%2F@c6e9d8332f4d4660cf340e179285988a9f7e9eddfa75e0835822bdc662cb5f15