pubmed-citation-search
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s search purpose is coherent, but its execution model relies on an unverified remote helper script and passes a plaintext wallet private key into that script. The gateway/payment flow may be legitimate, yet the install trust and credential-forwarding footprint are disproportionate enough to make this high risk.
Confidence: 89%Severity: 84%
Audit Metadata