skills/mvanhorn/printing-press-library/pp-cal-com/Socket

pp-cal-com

Warn

Audited by Socket on May 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s calendar-management capabilities mostly fit its stated purpose, but it asks the agent to install and trust personal-scope third-party CLIs/MCP components, forward Cal.com tokens into that code, and optionally send outputs to arbitrary webhooks. The main issue is install/execution trust and outbound routing flexibility, not confirmed malware.

Confidence: 79%Severity: 72%

Audit Metadata

Analyzed At

May 22, 2026, 09:39 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-cal-com%2F@e8c92d29fde447757ba65b7054ee80bcf92b68d6