pp-printgoat
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s core capabilities fit its stated 3D-model search/download purpose, and credential use is proportionate to the target services. The main concerns are install trust in a separate CLI with only partially verified provenance, optional arbitrary webhook delivery, and autonomous/background learning actions that create side effects beyond simple search/download behavior.
Confidence: 84%Severity: 58%
Audit Metadata