aps

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is mostly coherent with academic paper search and uses official Semantic Scholar/OpenAlex APIs, but trust is weakened by the missing install provenance for the `aps` CLI, local persistence of API keys, and especially the explicit Sci-Hub fallback to a third-party domain for PDF downloads. This looks more like a risky research utility than confirmed malware.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Apr 25, 2026, 10:56 PM
Package URL
pkg:socket/skills-sh/praveenperera%2Fdotfiles%2Faps%2F@62a95f891b87be6e5c437e6518dcc77fb72857ea