skills/mvanhorn/printing-press-library/pp-clickup/Socket

pp-clickup

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but it materially expands trust to third-party same-author binaries and optional MCP components, and it includes an arbitrary webhook delivery sink that can route ClickUp data off-platform. No clear evidence of malicious intent or hidden credential harvesting, but the install and data-routing footprint is broader than a simple API guide.

Confidence: 86%Severity: 62%

Audit Metadata

Analyzed At

Jul 10, 2026, 06:04 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-clickup%2F@e9f053f819127dc55f6820e7c690d7c76736d9d386dc63d45ed384bf69b5baa5