pp-pokeapi
Warn
Audited by Socket on May 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core Pokédex/query functionality is coherent, but the skill installs third-party executables from a different publisher than the listed author, uses unpinned @latest installs, and exposes arbitrary webhook output delivery plus optional remote feedback posting. These behaviors are not clearly necessary for an offline read-only Pokémon lookup skill, so the footprint is broader than its stated purpose.
Confidence: 82%Severity: 64%
Audit Metadata