skills/mvanhorn/printing-press-library/pp-3cx-xapi/Socket

pp-3cx-xapi

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities broadly match its stated 3CX administration purpose and the install sources appear same-org and verifiable, so this is not outright malicious. However, it is a high-impact admin skill with mutable install paths, optional webhook exfiltration of sensitive PBX data, and broad operational actions, so the overall risk is medium and warrants caution.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jul 27, 2026, 10:23 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-3cx-xapi%2F@567baaafba8d14e982faa486c4275faf870a9af4381fed82a5d5a388186203cd