pp-pointhound

Warn

Audited by Socket on Jun 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated travel-search purpose is coherent, but the skill asks the agent to install and trust an external CLI, lets that CLI read browser cookies for auth, and supports arbitrary webhook delivery. These behaviors are not outright incompatible with the purpose, but they expand trust and data-flow scope enough to warrant caution.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jun 22, 2026, 08:11 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-pointhound%2F@38c77a28fa0bcecc713889b17557d331ff8fbf6c63264401f3d6677384e2f2dd
Security Audit — socket — pp-pointhound