pp-kie
Warn
Audited by Socket on Aug 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose is coherent, but its actual trust model is not: a Kie.ai integration is mediated by a third-party Printing Press installer/CLI that receives the user's Kie token, and the CLI can route outputs to arbitrary webhooks. Public source and documented install steps reduce malware confidence, but the install chain, publisher mismatch, and credential forwarding make the skill high-risk relative to a direct official integration.
Confidence: 86%Severity: 74%
Audit Metadata