pp-everbee
Warn
Audited by Socket on Aug 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s research purpose mostly matches its capabilities, and install provenance appears same-publisher and open-source rather than covert. However, it requires trusting a non-official third-party CLI with an EverBee session token, uses unpinned latest installs, and exposes optional arbitrary webhook delivery, making the overall risk medium rather than benign.
Confidence: 82%Severity: 62%
Audit Metadata