skills/mvanhorn/printing-press-library/pp-blacklane/Socket

pp-blacklane

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core travel-quote purpose is plausible, but the skill expands into high-risk areas with third-party CLI installation, browser token extraction, arbitrary webhook output, and MCP installation. This looks more like a broad account-integrated automation wrapper than a simple quote tool, so the access and data flows are only partially proportionate to the stated purpose.

Confidence: 85%Severity: 78%

Audit Metadata

Analyzed At

Jul 16, 2026, 04:08 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-blacklane%2F@8c352c119cc87d536f8da01bd0b0d30c93c1b80fdb6fe70e7a810e37c0dd4dd5