pp-botsee

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core audit use case is plausible, but the skill's footprint is broader than its stated purpose and depends on a third-party CLI/toolchain that receives BotSee credentials. The install path is verifiable but unpinned, and the CLI can perform account, billing, API-key, and arbitrary webhook delivery actions, making this higher risk than a simple analytics integration.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Sep 1, 2026, 04:41 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-botsee%2F@4febee1aceba10406a91ba94436d0486e4ecc3bdf30cdf3b1e1de41592bea3f3