skills/qinyan-ai/qinyan-academic-skills/paper-2-web/Socket

paper-2-web

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities mostly match its paper-conversion purpose, and the requested API keys are proportionate. The main issue is install trust: K-Dense-branded instructions route execution and credentials through an unpinned personal GitHub repo with no clear same-org verification or release trail, plus a transitive dependency on another skill.

Confidence: 85%Severity: 64%

Audit Metadata

Analyzed At

Jun 26, 2026, 07:59 PM

Package URL

pkg:socket/skills-sh/qinyan-ai%2Fqinyan-academic-skills%2Fpaper-2-web%2F@c4f6a75f49c4f122c6d9f80bd115c8a5f7ca8bde4af9a4125c5c9c035752cc6e