zhihu-crawler

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core behavior matches its stated Zhihu export purpose, and there is no clear credential exfiltration or unrelated capability. The main risks are install trust and execution hygiene: official-but-unsafe curl|bash for Bun, unpinned third-party bunx PDF tooling, and destructive cleanup commands. Overall this looks functionally coherent but moderately risky to run as documented.

Confidence: 87%Severity: 53%
Audit Metadata
Analyzed At
Oct 1, 2026, 11:57 PM
Package URL
pkg:socket/skills-sh/cnife%2Fcrawl-zhihu%2Fzhihu-crawler%2F@870ff3c2dd78af16d2320cd73dcf6d5e0d6c454e60f39824dc5bf9acc0e5fa0d