pp-pipedrive

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is internally coherent for a Pipedrive CLI wrapper, and its documented data flows mostly match that purpose. However, it relies on third-party `mvanhorn` binaries rather than official Pipedrive tooling, forwards API credentials to that code, can register a third-party MCP server, and supports arbitrary webhook delivery of CRM output. Overall this is better classified as suspicious/high-trust developer tooling rather than overtly malicious.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Jul 23, 2026, 04:01 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-pipedrive%2F@9acce718bfad428d760c2e3a76c1c68435b4de2ccb6cf51f49075e441b59354b
Security Audit — socket — pp-pipedrive