Having heard about this for the first time, I think it's a great initiative. However, I'm concerned about the liabilities of having vetted a crate only to accidentally (ie non-maliciously) miss some kind of vulnerability.

Could this lead to the auditor getting sued?

I wouldn't mind getting a legal take on cargo-vet and similar tools.