claim-verification

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and core capabilities mostly align with manuscript verification, but the trust model is weakened by routing Zotero access and claim queries through third-party helper tooling and transitive skills. This is not clearly malicious, yet credential forwarding to non-official zotero-mcp and multi-skill/network dependence make it a medium-risk verification workflow rather than a low-risk local-only checker.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 05:56 PM
Package URL
pkg:socket/skills-sh/SipengXie2024%2Fsuperpower-writing%2Fclaim-verification%2F@eff12d543e87ad30f341b9c05b0c1097389750802e7ea7187255517fca079b22
Security Audit — socket — claim-verification