pp-human-goat

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: purpose and credentials largely match the stated service-integration goal, and installer provenance appears same-publisher, but the skill is high risk because it enables autonomous real-world actions with financial and communication consequences, uses sensitive session credentials, and supports arbitrary webhook delivery of outputs. This is not confirmed malware, but it is a dangerous skill to grant to an agent without strict human approval boundaries.

Confidence: 90%Severity: 82%
Audit Metadata
Analyzed At
Jul 16, 2026, 06:07 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-human-goat%2F@34020a2a3778107362259617b2b43012ced9c6df2c808d2a7efc92a15b3419de
Security Audit — socket — pp-human-goat