skills/leonchaox/qinyan-academic-skills/paper-2-web/Socket

paper-2-web

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities mostly match its paper-conversion purpose, and the requested API keys are proportionate. The main issue is install trust: K-Dense-branded instructions route execution and credentials through an unpinned personal GitHub repo with no clear same-org verification or release trail, plus a transitive dependency on another skill.

Confidence: 85%Severity: 64%

Audit Metadata

Analyzed At

Mar 31, 2026, 08:22 AM

Package URL

pkg:socket/skills-sh/LeonChaoX%2Fqinyan-academic-skills%2Fpaper-2-web%2F@c5249324635061e1e4e15c53e8eee87916276113