skills/mvanhorn/printing-press-library/pp-pvgis/Socket

pp-pvgis

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core purpose is coherent for a PVGIS helper, but the skill expands trust to an external CLI with publisher ambiguity and includes optional arbitrary webhook/feedback posting paths that are not strictly necessary for solar estimation. No credential harvesting or confirmed malicious behavior is evident.

Confidence: 83%Severity: 58%

Audit Metadata

Analyzed At

Jul 20, 2026, 11:01 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-pvgis%2F@6a67d1da6fb2347f6f62e841b909cd621988ed9f20c426e6dcd846c6cf141df2