pp-crestron
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core Crestron lookup/downloading capabilities fit the stated purpose, and the installers appear same-publisher rather than a random payload. But the skill has a broader footprint than a simple product-search helper: it requires third-party binaries, imports browser cookies, maintains persistent learning journals, and can POST results to arbitrary webhooks. The strongest concern is medium security risk from supply-chain trust and autonomous background data capture, not confirmed malware.
Confidence: 86%Severity: 56%
Audit Metadata