skills/mvanhorn/printing-press-library/pp-github-intel/Socket

pp-github-intel

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: mostly coherent, read-only GitHub research skill with same-org installers and no auth requirement, but it carries medium supply-chain risk from mutable unpinned installs, a transitive installer trust chain, and an arbitrary webhook output sink that can exfiltrate collected results.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Aug 18, 2026, 05:19 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-github-intel%2F@0baba240a57e4f1442ff5fd3eb6d113a50320c6c49135de2d79ee3d40f0cfb87