paper7-research

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The research purpose is coherent with searching arXiv and writing a brief, but the skill’s core dependency is an undocumented, unverifiable `paper7` CLI rather than a clearly official arXiv integration. No credential harvesting or malicious exfiltration is evident, yet the unverifiable binary plus external-content-to-file-write workflow makes this a high security-risk skill.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Apr 14, 2026, 01:33 AM
Package URL
pkg:socket/skills-sh/lucianfialho%2Fpaper7%2Fpaper7-research%2F@f33294b26cb2be64227e14eacc5d685624b6563e
Security Audit — socket — paper7-research