skills/mvanhorn/printing-press-library/pp-1password/Socket

pp-1password

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill places a third-party wrapper between the agent and 1Password, installs it through mutable chained tooling, and supports arbitrary webhook delivery of outputs. This is not confirmed malware, but it has disproportionate supply-chain and credential-handling risk for a secrets workflow.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Aug 18, 2026, 03:33 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-1password%2F@fac0e3a00f048e03b3f636f03d39dcda04be7ba73195cd08ebacb269809383fd