pp-prediction-goat

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose and read-only market-query capabilities are largely coherent, and the installer appears to come from the same publisher with public source. However, the skill expands its footprint with a multi-step installer chain, mutable unpinned installs, autonomous background learning writes, and an arbitrary webhook delivery feature that can route fetched data off-host. Not malicious on its face, but broader than a minimal prediction-market lookup skill and worth treating as medium risk.

Confidence: 85%Severity: 55%
Audit Metadata
Analyzed At
Aug 19, 2026, 03:35 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-prediction-goat%2F@db2d7ea91b0fb230a1ed12b8df86d169cfcf179eb6e296aafd79e7dbbb6fc590