academic-research-skills-codex

Warn

Audited by Socket on Sep 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's stated purpose matches its research-oriented capabilities, and the optional Anthropic integration is proportionate and routed to an official API. The main concern is supply-chain trust: installation pulls a skill from a third-party personal GitHub repo on an unpinned mutable branch via Git-based installer, plus docs include local rm -rf cleanup commands. No strong evidence of malicious intent or credential theft appears in the provided content.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Sep 13, 2026, 02:13 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Fcodex-skills%2Facademic-research-skills-codex%2F@24055bd21a400addbb0f34b6790f603350b35dc69460f98c0170f4df6df557be
Security Audit — socket — academic-research-skills-codex