pp-crestron

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core Crestron lookup/downloading capabilities fit the stated purpose, and the installers appear same-publisher rather than a random payload. But the skill has a broader footprint than a simple product-search helper: it requires third-party binaries, imports browser cookies, maintains persistent learning journals, and can POST results to arbitrary webhooks. The strongest concern is medium security risk from supply-chain trust and autonomous background data capture, not confirmed malware.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Sep 14, 2026, 11:47 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-crestron%2F@7e44a4e0537cd2285479e7fc25ec6b08a97b4b5bd456b30e49fc8f4cf2a280bb