pp-printgoat

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core capabilities fit its stated 3D-model search/download purpose, and credential use is proportionate to the target services. The main concerns are install trust in a separate CLI with only partially verified provenance, optional arbitrary webhook delivery, and autonomous/background learning actions that create side effects beyond simple search/download behavior.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Sep 10, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-printgoat%2F@9dec6758ba0797ef1f371518abf8908af9d9dd37cf3629d872bc1581033af767
Security Audit — socket — pp-printgoat