pp-digg

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's read-only Digg analysis purpose mostly matches its capabilities, and no auth or credential harvesting is requested. Main risks come from trusting a same-author third-party CLI/MCP tool and the optional ability to POST results to arbitrary webhooks, which is somewhat broader than a simple terminal-tailing skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
May 16, 2026, 07:50 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-digg%2F@97940d5e9ec822a01fa4e1b3aeb48ad3bf91b40a
Security Audit — socket — pp-digg