pp-judgeme

Warn

Audited by Socket on Aug 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent with a Judge.me review-management skill, but it depends on external CLIs, forwards API credentials to them, and includes optional arbitrary webhook delivery plus mutation-capable commands. This is not clearly malicious, but it is a medium-risk skill that should be treated with caution until installer provenance is independently verified.

Confidence: 80%Severity: 57%
Audit Metadata
Analyzed At
Aug 2, 2026, 08:51 AM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-judgeme%2F@ea347df1054d73bdae2df3f68709ef341a8f715242cde712d709655318cba4a3
Security Audit — socket — pp-judgeme