skills/leonchaox/qinyan-academic-skills/bgpt-paper-search/Socket

bgpt-paper-search

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, but it expands agent trust to a third-party remote MCP service and an npm-delivered helper (`mcp-remote`). Data flow to BGPT is expected for the feature, yet the indirect routing, mixed publisher identity, and transitive external-service dependency make this medium risk rather than benign.

Confidence: 76%Severity: 56%

Audit Metadata

Analyzed At

Mar 31, 2026, 08:22 AM

Package URL

pkg:socket/skills-sh/LeonChaoX%2Fqinyan-academic-skills%2Fbgpt-paper-search%2F@4091693d6f63b6603b83bee555ea1ef55eb2e384