skills/mvanhorn/printing-press-library/pp-copper/Socket

pp-copper

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is mostly coherent for a Copper CRM automation tool, and its install sources appear same-owner and publicly documented. However, it depends on community binaries with unpinned installs, forwards Copper credentials to third-party code, and includes optional arbitrary webhook delivery that can export CRM data beyond Copper’s official API flow.

Confidence: 84%Severity: 54%

Audit Metadata

Analyzed At

Jul 9, 2026, 09:51 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-copper%2F@5c2cd1afae032fe62281622bbadc3ec08783d093769a3708fabf21a43e3d04e2