pp-forkable

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core Forkable read/write functionality is largely aligned with purpose, but the skill depends on unpinned external binaries, imports browser-session credentials, can perform real account mutations, and includes an arbitrary webhook output sink that could exfiltrate sensitive lunch/account data. This looks more like a high-risk unofficial automation tool than clear malware.

Confidence: 82%Severity: 71%
Audit Metadata
Analyzed At
Aug 26, 2026, 08:48 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-forkable%2F@42698329ca959e1e36f7ad43c60e6e30d40688bd7a6fc2d40fd75e03290714e3