skills/mvanhorn/printing-press-library/pp-twitch/Socket

pp-twitch

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is largely aligned with its Twitch automation purpose, but it asks the agent to install and trust a personal-publisher CLI/MCP binary and exposes arbitrary webhook output delivery plus high-impact account actions. This looks more like a risky but coherent automation skill than confirmed malware.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Sep 10, 2026, 08:03 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-twitch%2F@01400159333db1094a4d7ffa6e3aed53b38218f95c4726d490ce435f7ae2b40e