skills/mvanhorn/printing-press-library/pp-trigger-dev/Socket

pp-trigger-dev

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's capabilities mostly fit its stated Trigger.dev admin purpose, but it expands trust to publisher-controlled external CLIs and an MCP server via unpinned installs. Data flows to official Trigger.dev APIs are proportionate, yet optional webhook delivery and transitive tool installation increase risk beyond a simple docs skill.

Confidence: 86%Severity: 61%

Audit Metadata

Analyzed At

Oct 1, 2026, 02:04 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-trigger-dev%2F@bda5f57184d01cbd4e414fc274292a65c8e54b296e63fc3a5a7c241618bfd6a1