academic-research-skills-codex
Warn
Audited by Socket on Sep 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's stated purpose matches its research-oriented capabilities, and the optional Anthropic integration is proportionate and routed to an official API. The main concern is supply-chain trust: installation pulls a skill from a third-party personal GitHub repo on an unpinned mutable branch via Git-based installer, plus docs include local rm -rf cleanup commands. No strong evidence of malicious intent or credential theft appears in the provided content.
Confidence: 90%Severity: 58%
Audit Metadata