ml-paper-writing
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core writing, LaTeX, and citation-verification behavior aligns with the stated purpose, and most network calls target legitimate scholarly services. The main inconsistency is the recommendation to install Exa access through the third-party `mcp-remote` bridge rather than Exa's current direct MCP path, which adds unnecessary supply-chain and potential credential/data transit risk; otherwise the skill looks like a documentation-heavy workflow guide rather than malware.
Confidence: 89%Severity: 58%
Audit Metadata