pp-loopnet
Warn
Audited by Socket on Aug 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core LoopNet scraping/analysis purpose matches the CLI capabilities and the install source appears same-publisher and documented, but the skill still expands trust by installing an external CLI, handling raw browser cookies, and allowing arbitrary webhook delivery of output. This is not confirmed malware, but it carries medium risk due to credential sensitivity and flexible outbound data routing.
Confidence: 84%Severity: 56%
Audit Metadata