pp-averusa

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core document-catalog purpose aligns with a same-publisher CLI install and public-site scraping, so this is not overtly malicious. However, the skill’s footprint is broader than a simple lookup helper because it mandates autonomous local learning writes and exposes arbitrary webhook/output routing plus configurable feedback egress, which create medium data-flow risk.

Confidence: 88%Severity: 54%
Audit Metadata
Analyzed At
Aug 20, 2026, 08:38 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-averusa%2F@c48affbc05276fd29c2c210d8e904f3f510017595bbd758a493fff132f90d9e3
Security Audit — socket — pp-averusa