url-to-pdf

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the capability broadly matches the stated purpose, but the skill routes sensitive page/HTML content to an unspecified hosted service, auto-registers/stores a token, and can redirect all traffic via PAGEWATCH_BASE_URL. This is not clear malware, but the external data flow and unclear endpoint provenance create medium security risk for documents that may contain sensitive information.

Confidence: 84%Severity: 59%
Audit Metadata
Analyzed At
Jul 24, 2026, 03:51 PM
Package URL
pkg:socket/skills-sh/toolshedlabs-hash%2Fweb-access-skills%2Furl-to-pdf%2F@f7252ff1f062c1f3b4954cd98efb12980ded2bca00abdbb18e9e855a7b13cfd6
Security Audit — socket — url-to-pdf