skills/mvanhorn/printing-press-library/pp-amazon-ads/Socket

pp-amazon-ads

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is broadly coherent with its Amazon Ads purpose and uses same-org install sources, but it relies on mutable external binary installs, forwards OAuth credentials to third-party CLI code, supports arbitrary webhook output, and can perform real ad-account mutations. Medium risk, not confirmed malware.

Confidence: 84%Severity: 59%

Audit Metadata

Analyzed At

Jul 11, 2026, 02:14 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-amazon-ads%2F@eeab7114f3b8ae83223acf682201944e9009e52f17c8bad33b9dba80cba3eea5