skills/cobusgreyling/jev/jev-guardrail/Socket

jev-guardrail

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The guardrail purpose is coherent and the prompt-injection findings are benign documentation artifacts, but the install path is inconsistent with the official TypeSafe evidence provided. The main risk is supply-chain trust around `npx jev guard`, which appears less verifiable than the documented official SDK-based integration.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

Sep 28, 2026, 10:41 AM

Package URL

pkg:socket/skills-sh/cobusgreyling%2Fjev%2Fjev-guardrail%2F@320e17ee810932d8283ccfeb77b733eea037ca0688ce807e0c4b5ad00dfef86b