pp-mobbin
Warn
Audited by Socket on Jul 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose and main capabilities are coherent, and its install sources appear same-publisher and legitimate. However, it relies on browser-cookie extraction, direct nonstandard backend/API routing, and arbitrary webhook delivery, making the data-flow and credential-handling footprint riskier than a typical read-only design-research skill.
Confidence: 84%Severity: 62%
Audit Metadata