pp-ankiweb

Warn

Audited by Socket on Jun 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose and AnkiWeb-focused capabilities are mostly coherent, and the install sources appear same-publisher and proportionate. The main risk is that the skill delegates trust to an external CLI and includes arbitrary webhook delivery of outputs, which expands data-flow scope beyond normal AnkiWeb querying. No strong evidence of malware or hidden credential theft, but the external binary plus exfiltration-capable output sink make it medium risk.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 15, 2026, 01:15 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-ankiweb%2F@5a5ef62b70cd1393f1c9700d5d8131ce4f356edce748d6e8a8353cafea5f7312
Security Audit — socket — pp-ankiweb