pp-faa-registry

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core FAA lookup purpose aligns with the documented CLI and official FAA data flow, and install provenance is same-org via npm/Go rather than an unknown host. However, the skill also adds MCP server installation and supports arbitrary webhook/feedback endpoints for output delivery, which broadens data egress beyond the stated lookup purpose and makes the overall footprint moderately risky.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Jul 9, 2026, 12:26 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-faa-registry%2F@fdea21d8e7c6a53c8847513dd1ad7b769ee91d5438fec8a7801ae17c899d0372
Security Audit — socket — pp-faa-registry