paper-slide-deck

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core functionality is mostly aligned with the stated purpose, and the official Gemini API path looks proportionate and relatively coherent. However, the skill materially expands risk through unpinned runtime execution, local extension overrides, and especially the optional dependency on a separate reverse-engineered `baoyu-danger-gemini-web` skill, creating a high-risk transitive trust path not necessary for a normal slide-deck generator.

Confidence: 89%Severity: 76%
Audit Metadata
Analyzed At
Mar 31, 2026, 08:24 AM
Package URL
pkg:socket/skills-sh/LeonChaoX%2Fqinyan-academic-skills%2Fpaper-slide-deck%2F@a43793890b5742fba9bf8124f31d3f9f6373540b
Security Audit — socket — paper-slide-deck