pp-archive-is

Warn

Audited by Socket on May 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core archiving capability is coherent, and the same-author npm/go install paths are plausible, but the skill’s footprint extends beyond simple archive lookup. Optional webhook delivery, configurable upstream feedback posting, endpoint overrides, and transitive MCP installation introduce medium-high data-flow and trust risks disproportionate to a basic archive/paywall-reader skill.

Confidence: 81%Severity: 68%
Audit Metadata
Analyzed At
May 9, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-archive-is%2F@54bc3e0efaec215c6a0a015da4eb4278de9f92fb