pp-prediction-goat
Warn
Audited by Socket on Aug 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose and read-only market-query capabilities are largely coherent, and the installer appears to come from the same publisher with public source. However, the skill expands its footprint with a multi-step installer chain, mutable unpinned installs, autonomous background learning writes, and an arbitrary webhook delivery feature that can route fetched data off-host. Not malicious on its face, but broader than a minimal prediction-market lookup skill and worth treating as medium risk.
Confidence: 85%Severity: 55%
Audit Metadata