pp-erank
Warn
Audited by Socket on Aug 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the install sources are same-org and verifiable, so it is not fundamentally malicious. The main risks are delegation to external CLI/MCP components, mutable unpinned installs, and arbitrary webhook delivery that can route researched or account-derived output to third-party endpoints.
Confidence: 85%Severity: 56%
Audit Metadata