pp-faa-registry
Warn
Audited by Socket on Jul 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core FAA lookup purpose aligns with the documented CLI and official FAA data flow, and install provenance is same-org via npm/Go rather than an unknown host. However, the skill also adds MCP server installation and supports arbitrary webhook/feedback endpoints for output delivery, which broadens data egress beyond the stated lookup purpose and makes the overall footprint moderately risky.
Confidence: 87%Severity: 56%
Audit Metadata