paper-slide-deck
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core functionality is mostly aligned with the stated purpose, and the official Gemini API path looks proportionate and relatively coherent. However, the skill materially expands risk through unpinned runtime execution, local extension overrides, and especially the optional dependency on a separate reverse-engineered `baoyu-danger-gemini-web` skill, creating a high-risk transitive trust path not necessary for a normal slide-deck generator.
Confidence: 89%Severity: 76%
Audit Metadata