skills/mvanhorn/printing-press-library/pp-here-now/Socket

pp-here-now

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core publish/sync behavior fits the stated purpose, but the skill depends on third-party CLI/MCP tooling from a different publisher identity, forwards account credentials into that tooling, and includes arbitrary webhook output delivery that can exfiltrate data. This looks more like a medium-risk external-tool wrapper than confirmed malware.

Confidence: 82%Severity: 66%

Audit Metadata

Analyzed At

Jun 28, 2026, 03:03 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-here-now%2F@355a80a954477edc42c069efd24e989670e779c0858895ee552b4473ecadc613