sci-zotero

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose and requested Zotero credentials are mostly coherent, and the likely network targets are largely legitimate scholarly services. However, the skill's real behavior is delegated to an unseen local script outside the skill directory, with no provenance, pinning, or auditability in the provided content, so trust and data-flow integrity cannot be fully verified.

Confidence: 83%Severity: 57%
Audit Metadata
Analyzed At
May 15, 2026, 02:11 PM
Package URL
pkg:socket/skills-sh/ShZhao27208%2FAut_Sci_Write%2Fsci-zotero%2F@3d5a6b8982f2bd3d9b97d37880c2c4476b5e46c5
Security Audit — socket — sci-zotero