academic-paper-writer-pro-2

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. Most document-processing capabilities fit the stated paper-writing purpose, but the skill’s footprint expands into risky areas: autonomous self-update from a personal GitHub repo, transitive skill installation via `npx skills add`, broad file deletion/rewriting, and an explicit AI-detection-evasion pipeline. The main concern is not classic malware behavior, but disproportionate trust and evasive functionality embedded in a writing skill.

Confidence: 89%Severity: 80%
Audit Metadata
Analyzed At
Apr 19, 2026, 07:30 AM
Package URL
pkg:socket/skills-sh/BoHeFan%2Facademic-paper-writer-pro-2%2Facademic-paper-writer-pro-2%2F@4d89d51e7e2fdffb5d5c46613a47e5945b90227b
Security Audit — socket — academic-paper-writer-pro-2