skills/microsoft/researchstudio/paper2poster/Socket

paper2poster

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s behavior is mostly coherent with poster rendering, but it has a broader-than-necessary Bash(*) capability, relies on transitive skill trust, and can send paper text to remote TTS services via a third-party client. This looks like a high-complexity automation skill with moderate supply-chain and data-flow risk rather than confirmed malware.

Confidence: 82%Severity: 52%

Audit Metadata

Analyzed At

Jul 26, 2026, 05:08 PM

Package URL

pkg:socket/skills-sh/microsoft%2Fresearchstudio%2Fpaper2poster%2F@9c602605a534b3469d679b62f5d07bfb4a9f6e7b9fb66b0f572787c0f281597c