skills/leonchaox/qinyan-academic-skills/labarchive-integration/Socket

labarchive-integration

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s purpose and API data flows are coherent with LabArchives integration, and it routes data to official LabArchives endpoints. However, it relies on an unpinned third-party wrapper from an unrelated personal GitHub repo, creating disproportionate supply-chain risk for a credential-handling skill. Main concern is install trust, not confirmed malware or off-platform credential exfiltration.

Confidence: 90%Severity: 72%

Audit Metadata

Analyzed At

Mar 31, 2026, 08:25 AM

Package URL

pkg:socket/skills-sh/LeonChaoX%2Fqinyan-academic-skills%2Flabarchive-integration%2F@9220c0a60caf17570146908c90cb739e7d3c63d8