qinyan-paper-search

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The overall purpose is coherent for a literature-search skill, and the required API key is proportionate. However, the real data flow goes through Qinyan's API, and Google Scholar queries are further routed through ScrapingDog, a third-party intermediary rather than an official service path. This is not confirmed malware, but the indirect routing and missing script visibility create medium security risk.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Mar 31, 2026, 08:25 AM
Package URL
pkg:socket/skills-sh/LeonChaoX%2Fqinyan-academic-skills%2Fqinyan-paper-search%2F@5453fd88769f86a3ee857538022ec1532579682e
Security Audit — socket — qinyan-paper-search