academic-research
Warn
Audited by Socket on Jul 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the research-routing purpose is mostly coherent, but the skill unnecessarily expands trust by instructing installation of upstream plugins/skills from third-party GitHub repos, including a transitive skill install. Broad WebFetch+Bash+Write capabilities also create medium prompt-injection risk for a content-ingestion skill.
Confidence: 89%Severity: 78%
Audit Metadata