academic-research-hub

Fail

Audited by Socket on May 15, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS. The core academic-research capabilities are coherent and mostly supported by standard Python packages, but the extra requirement to install a proprietary OpenClaw/ClawHub CLI is not well-justified for this skill’s stated purpose. Because the referenced domain appears same-ecosystem/official rather than a random third party, this is not strong evidence of malware; however, the naming mismatch, unnecessary prerequisite, and remote-installer trust expansion make the skill moderately risky.

Confidence: 88%Severity: 61%
Audit Metadata
Analyzed At
May 15, 2026, 10:48 AM
Package URL
pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Facademic-research-hub%2F@f2e05a2572961759849fec396d789707e5848a93
Security Audit — socket — academic-research-hub