pp-forkable
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core Forkable read/write functionality is largely aligned with purpose, but the skill depends on unpinned external binaries, imports browser-session credentials, can perform real account mutations, and includes an arbitrary webhook output sink that could exfiltrate sensitive lunch/account data. This looks more like a high-risk unofficial automation tool than clear malware.
Confidence: 82%Severity: 71%
Audit Metadata