literature-review
Warn
Audited by Socket on Jun 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose is coherent for a literature-review skill, but the footprint is broadened by a same-org curl|bash installer, primary reliance on an external authenticated CLI, mandatory transitive skill usage, and high-volume untrusted content ingestion with Bash/Write access. This looks more like a risky but plausibly legitimate research automation skill than malware.
Confidence: 100%Severity: 60%
Audit Metadata