linkfox-zhihuiya-pdf-data
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The core patent-PDF retrieval purpose is coherent, and use of an API key is proportionate, but the skill expands scope with automatic feedback reporting, mandatory local persistence, and especially transitive installation of another skill from an archive URL lacking strong public verification. The main risk is supply-chain and trust-chain expansion rather than confirmed malicious behavior.
Confidence: 84%Severity: 76%
Audit Metadata