qinyan-paper-search

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The overall purpose is coherent for a literature-search skill, and the required API key is proportionate. However, the real data flow goes through Qinyan's API, and Google Scholar queries are further routed through ScrapingDog, a third-party intermediary rather than an official service path. This is not confirmed malware, but the indirect routing and missing script visibility create medium security risk.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Jun 26, 2026, 07:59 PM
Package URL
pkg:socket/skills-sh/qinyan-ai%2Fqinyan-academic-skills%2Fqinyan-paper-search%2F@af3c8b8a85cba7996b5402687fc64c20376b6a5a53b466d3649241db007748f4