skills/mvanhorn/printing-press-library/pp-pop/Socket

pp-pop

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is largely coherent with its invoicing purpose and uses same-org install sources, so it is not clearly malicious. However, unpinned executable installs, MCP transitive trust, arbitrary webhook egress, and support for autonomous submission/email actions make the footprint moderately risky for an agent skill.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jul 27, 2026, 10:22 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-pop%2F@395e3224c5133da763ba086de4e2758efbbbcf1c7e83b723d4291857167424ce