skills/mvanhorn/printing-press-library/pp-ikon/Socket

pp-ikon

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's core purpose is coherent, but it materially expands trust by requiring an external CLI/MCP install, using imported browser session cookies, and allowing arbitrary webhook delivery of account data. This looks more like a high-risk helper than clear malware, with the main concern being credential/session handling and exfiltration-capable output routing.

Confidence: 82%Severity: 72%

Audit Metadata

Analyzed At

Jul 20, 2026, 11:01 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-ikon%2F@4d157183774fef73d11c357455bb7443f1de280c4010efbf0febe1d63a90c6ee