skills/mvanhorn/printing-press-library/pp-masterpark/Socket

pp-masterpark

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s booking purpose broadly matches its capabilities, but it relies on unpinned third-party installation paths and forwards user credentials to an unofficial external CLI. Same-author npm/GitHub provenance reduces evidence of outright malware, yet the install trust, transitive installer behavior, and credential handling make the overall skill medium-high risk.

Confidence: 85%Severity: 78%

Audit Metadata

Analyzed At

Jul 27, 2026, 10:22 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-masterpark%2F@837deb66783c78eb1aef2dd49e711b9883e24e36fc25d1434b17a913e79acc69