pp-context-dev

Warn

Audited by Socket on Jun 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s web-intelligence purpose broadly matches its scraping and enrichment commands, but it relies on externally installed binaries from identities not clearly verifiable against the stated publisher, forwards API credentials to that CLI, and supports arbitrary webhook delivery and MCP registration. This is more consistent with a real integration than outright malware, but the trust and data-flow footprint is broader than ideal for a simple skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jun 25, 2026, 04:57 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-context-dev%2F@a1f6239f94e4ca4f91c7ef29b29fc6722f57d9c3f182f804fc302b007c4e6c1d
Security Audit — socket — pp-context-dev