skills/mvanhorn/printing-press-library/pp-kdpnichefinder/Socket

pp-kdpnichefinder

Warn

Audited by Socket on Jul 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's core purpose is coherent, but its footprint is broader than a simple local research helper. Medium risk comes from external CLI installation, browser-session capture, arbitrary webhook delivery, and MCP server installation; data mostly flows to the expected service, but optional sinks and transitive trust meaningfully increase exposure.

Confidence: 81%Severity: 63%

Audit Metadata

Analyzed At

Jul 3, 2026, 02:56 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-kdpnichefinder%2F@7fdb6ad3a2b7d7e7528f2d5228b4439943478021ae4e0c2bd1adebb3d021b586