skills/bahayonghang/my-ai-cli-toolkit/literature-mentor/Socket

literature-mentor

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s reading/analysis purpose is coherent, and its direct network targets are mostly legitimate academic sources. Risk comes from implicit reliance on a non-official Zotero MCP, possible credential forwarding into that third-party tool, and processing of untrusted external content with agent capabilities that are not tightly scoped in the skill text.

Confidence: 83%Severity: 56%

Audit Metadata

Analyzed At

Jul 11, 2026, 04:47 PM

Package URL

pkg:socket/skills-sh/bahayonghang%2Fmy-claude-code-settings%2Fliterature-mentor%2F@865629bdde6257904497da0d6062334eec565f04ca08e14ec5d49dca7e3dac56