qinyan-paper-search
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The overall purpose is coherent for a literature-search skill, and the required API key is proportionate. However, the real data flow goes through Qinyan's API, and Google Scholar queries are further routed through ScrapingDog, a third-party intermediary rather than an official service path. This is not confirmed malware, but the indirect routing and missing script visibility create medium security risk.
Confidence: 88%Severity: 58%
Audit Metadata