skills/mvanhorn/printing-press-library/pp-worten/Socket

pp-worten

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent and no credential harvesting is evident, but the skill relies on externally installed binaries through a chained installer path and can route output to arbitrary webhooks. The main risk is supply-chain and transitive trust, not confirmed malicious behavior.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

Jul 20, 2026, 11:00 PM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-worten%2F@7cebc35e7d835fa8fd404e85a2c2c6ebc8d4b07749a98ea923525321372153be