pp-digg
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's read-only Digg analysis purpose mostly matches its capabilities, and no auth or credential harvesting is requested. Main risks come from trusting a same-author third-party CLI/MCP tool and the optional ability to POST results to arbitrary webhooks, which is somewhat broader than a simple terminal-tailing skill.
Confidence: 84%Severity: 62%
Audit Metadata