pp-erank

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the install sources are same-org and verifiable, so it is not fundamentally malicious. The main risks are delegation to external CLI/MCP components, mutable unpinned installs, and arbitrary webhook delivery that can route researched or account-derived output to third-party endpoints.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Aug 19, 2026, 04:13 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-erank%2F@0fccaef4e27dea002292eb5111a17d1cc7bf4f828f222acf17241bb27f363496