skills/mvanhorn/printing-press-library/pp-twitch/Socket

pp-twitch

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is largely aligned with its Twitch automation purpose, but it asks the agent to install and trust a personal-publisher CLI/MCP binary and exposes arbitrary webhook output delivery plus high-impact account actions. This looks more like a risky but coherent automation skill than confirmed malware.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Jul 20, 2026, 11:00 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-twitch%2F@cefe458036e085b9f436b53de6a7fdded11c09053d0e8f4fc35ee3815223e0d1