pp-wordpress

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

BENIGN with moderate security risk. The skill is internally coherent for WordPress management, and its installers appear same-org and verifiable, but it expands trust to an external binary, uses mutable install paths, handles WordPress credentials, and includes optional arbitrary webhook delivery that could export data if misused.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
Aug 21, 2026, 11:14 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-wordpress%2F@f1828328365b05e08d91fe33b7587ba20c3f30be33174a01b7d36ed3bdcb8c68
Security Audit — socket — pp-wordpress