skills/mvanhorn/printing-press-library/pp-foxnews/Socket

pp-foxnews

Warn

Audited by Socket on Jun 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's stated purpose is benign and its runtime scope is narrow, but it outsources core behavior to a separately installed CLI and also suggests transitive skill installation. With no credential requests or suspicious data routing, this looks more like supply-chain/trust risk than confirmed malicious behavior.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 15, 2026, 02:34 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-foxnews%2F@482f1525d5ff7eaa6d4fa4099e4cbb00746b339f0ff8ff1a4e06b7fe78f7e1e8