paper7-research
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The research purpose is coherent with searching arXiv and writing a brief, but the skill’s core dependency is an undocumented, unverifiable `paper7` CLI rather than a clearly official arXiv integration. No credential harvesting or malicious exfiltration is evident, yet the unverifiable binary plus external-content-to-file-write workflow makes this a high security-risk skill.
Confidence: 87%Severity: 82%
Audit Metadata