pp-greatclips

Warn

Audited by Socket on May 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is plausible, and the official API hosts fit the use case, but the overall footprint is not internally consistent with the claimed publisher. A skill branded as Great Clips should not rely on a third-party-installed binary that receives manually extracted authenticated session cookies, and the optional arbitrary webhook delivery further expands data-exfiltration risk.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
May 17, 2026, 11:29 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-greatclips%2F@78e0399e22f498125a2260823c509ef9528a7beb
Security Audit — socket — pp-greatclips