skills/mvanhorn/printing-press-library/pp-posthog/Socket

pp-posthog

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's purpose matches PostHog operations, but it requires a non-official third-party CLI that receives PostHog API credentials and can forward outputs to arbitrary webhooks. The main risk is supply-chain and credential-forwarding trust, not confirmed malware.

Confidence: 86%Severity: 74%

Audit Metadata

Analyzed At

Sep 16, 2026, 08:10 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-posthog%2F@25c6384a55829ec1ff83da005c8b8b470d5319800eefe181b79e44a7f1994a1f