research
Warn
Audited by Socket on May 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The overall capability matches a research skill, but the documentation is internally inconsistent about Z.AI MCP being free/no-key and understates that core searches/content retrieval are routed through third-party remote MCP services. Main risks are third-party data exposure and indirect prompt injection from untrusted web content, not confirmed malware.
Confidence: 87%Severity: 61%
Audit Metadata