skills/mvanhorn/printing-press-library/pp-posthog/Socket

pp-posthog

Warn

Audited by Socket on May 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly coherent with a PostHog analytics wrapper, but it depends on an external CLI with only moderate install provenance, forwards API credentials to that CLI, and supports arbitrary webhook delivery of results. This is not clearly malicious, but the installer inconsistency and non-official output paths raise medium risk.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

May 23, 2026, 04:11 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-posthog%2F@e462679b8e0baab64032f76407f721407c61de73