paper-summary
Warn
Audited by Socket on Aug 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose is coherent and no direct credential theft or malicious commands are shown, but the skill relies on unnamed PDF extraction tools with unclear provenance and is installed through a transitive third-party skill chain. Risk is medium due to unverifiable execution components and untrusted-content processing, not confirmed malware.
Confidence: 82%Severity: 56%
Audit Metadata