skills/mvanhorn/printing-press-library/pp-supermemory-admin/Socket

pp-supermemory-admin

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is purpose-aligned for Supermemory administration, but its footprint relies on mutable third-party installs from a personal publisher, forwards admin credentials to that external CLI, and includes arbitrary webhook delivery plus MCP transitive installation. This is not confirmed malware, but it carries high supply-chain and data-handling risk.

Confidence: 89%Severity: 78%

Audit Metadata

Analyzed At

Sep 1, 2026, 05:04 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-supermemory-admin%2F@8cbebd3e28776a932a6bdf1f004d5c724025cc6a0185ed5c73beef3251b7fde9