pp-mobalytics-lol

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s LoL data-query purpose mostly matches its capabilities, and the install sources are same-org and publicly verifiable, so this is not outright malicious. However, it depends on third-party binaries from a different publisher than the skill author, uses unpinned install methods, and includes arbitrary webhook/file delivery that broadens data egress beyond a simple stats lookup tool.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Jul 27, 2026, 10:23 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-mobalytics-lol%2F@cf74db79430f66debb5e2cadc1b751b6d8686b153a949343d026db0b862ff352
Security Audit — socket — pp-mobalytics-lol