pp-human-goat
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: purpose and credentials largely match the stated service-integration goal, and installer provenance appears same-publisher, but the skill is high risk because it enables autonomous real-world actions with financial and communication consequences, uses sensitive session credentials, and supports arbitrary webhook delivery of outputs. This is not confirmed malware, but it is a dangerous skill to grant to an agent without strict human approval boundaries.
Confidence: 90%Severity: 82%
Audit Metadata