bgpt-paper-search
Warn
Audited by Socket on May 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core function matches its description, but the install/execution path is inconsistent: it recommends running an extra third-party npx helper despite BGPT offering an official remote setup. This is mainly a supply-chain and credential-forwarding concern rather than confirmed malware.
Confidence: 88%Severity: 56%
Audit Metadata