skills/mvanhorn/printing-press-library/pp-splitwise/Socket

pp-splitwise

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: mostly coherent Splitwise automation with same-org install sources and official API alignment, but it relies on external CLI/MCP binaries, forwards credentials to that CLI, and includes arbitrary webhook/output delivery plus mutating financial/account actions. Not clearly malicious, but the execution and data-routing footprint is broader than a simple offline ledger helper.

Confidence: 86%Severity: 58%

Audit Metadata

Analyzed At

Jul 20, 2026, 11:01 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-splitwise%2F@8258eef60e70930753744efaee11f1fb9eebdbb78fb2c2e4f6c02e10997a3e62