pp-digg

Provides structured access to Digg's rankings and GitHub feeds for tracking AI news cycles and research insights.

Install this skill

85/100

Security score

The pp-digg skill was audited on Jun 6, 2026 and we found 3 security issues across 2 threat categories. Review the findings below before installing.

medium line 369

Webhook reference - potential data exfiltration

SourceSKILL.md

369	\| `webhook:<url>` \| POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) \|

medium line 371

Webhook reference - potential data exfiltration

SourceSKILL.md

371	Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.

medium line 357

Access to hidden dotfiles in home directory

SourceSKILL.md

357	Entries are stored locally at `~/.digg-pp-cli/feedback.jsonl`. They are never POSTed unless `DIGG_FEEDBACK_ENDPOINT` is set AND either `--send` is passed or `DIGG_FEEDBACK_AUTO_SEND=true`. Default beh

Scanned on Jun 6, 2026

GitHub Stars 1.4K

Rate this skill

Categorymarketing

UpdatedJune 10, 2026