zhihu-crawler
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's core behavior matches its stated Zhihu export purpose, and there is no clear credential exfiltration or unrelated capability. The main risks are install trust and execution hygiene: official-but-unsafe curl|bash for Bun, unpinned third-party bunx PDF tooling, and destructive cleanup commands. Overall this looks functionally coherent but moderately risky to run as documented.
Confidence: 87%Severity: 53%
Audit Metadata