pp-pipedrive
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is internally coherent for a Pipedrive CLI wrapper, and its documented data flows mostly match that purpose. However, it relies on third-party `mvanhorn` binaries rather than official Pipedrive tooling, forwards API credentials to that code, can register a third-party MCP server, and supports arbitrary webhook delivery of CRM output. Overall this is better classified as suspicious/high-trust developer tooling rather than overtly malicious.
Confidence: 87%Severity: 72%
Audit Metadata