skills/mvanhorn/printing-press-library/pp-lawhub/Socket

pp-lawhub

Warn

Audited by Socket on May 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is purpose-aligned and uses a same-repo open-source CLI, but it relies on an unofficial personal-project binary to import live LawHub browser auth and sync account metadata. The main concerns are third-party handling of authenticated session data and unpinned installation, not confirmed malware or overt exfiltration.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

May 17, 2026, 11:28 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-lawhub%2F@417bbcfe340368dd34a65588cbafddae4e625bdd