pp-context-dev
Warn
Audited by Socket on Jun 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s web-intelligence purpose broadly matches its scraping and enrichment commands, but it relies on externally installed binaries from identities not clearly verifiable against the stated publisher, forwards API credentials to that CLI, and supports arbitrary webhook delivery and MCP registration. This is more consistent with a real integration than outright malware, but the trust and data-flow footprint is broader than ideal for a simple skill.
Confidence: 84%Severity: 62%
Audit Metadata