judgeme
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Suspicious but not malicious. The skill is coherent for a Membrane-hosted Judge.me integration and uses an official npm CLI, but it intermediates all authentication and API traffic through Membrane rather than talking directly to Judge.me, which creates meaningful third-party trust and data-flow risk.
Confidence: 84%Severity: 58%
Audit Metadata