pp-azure-devops

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core Azure DevOps purpose is plausible, and the install sources appear tied to a real public project, but the skill’s effective footprint is much broader than a simple analytics helper: it installs external executables, accepts a high-privilege PAT, enables destructive/write operations, and includes arbitrary webhook output delivery. Those combined signals make it higher-risk than a normal documentation or read-only integration skill.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Aug 20, 2026, 08:39 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-azure-devops%2F@7e9dc284c5da9342730894592c7d4d6658517676595c56533d02e45bcf7fad94