linkfox-zhihuiya-abstract-data-translated
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core patent-translation purpose is coherent, but the skill expands beyond that purpose by auto-persisting results, auto-sending feedback, and especially by instructing transitive installation of a remote ZIP-based onboarding skill with weak provenance. Main risk is supply-chain and trust-chain expansion rather than confirmed malicious exfiltration.
Confidence: 85%Severity: 81%
Audit Metadata