judgeme

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Suspicious but not malicious. The skill is coherent for a Membrane-hosted Judge.me integration and uses an official npm CLI, but it intermediates all authentication and API traffic through Membrane rather than talking directly to Judge.me, which creates meaningful third-party trust and data-flow risk.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Apr 28, 2026, 11:52 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fjudgeme%2F@70b5d554ca539084ac868306b1edc2d3884a2ff9
Security Audit — socket — judgeme