literature-review

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent for a literature-review skill, but the footprint is broadened by a same-org curl|bash installer, primary reliance on an external authenticated CLI, mandatory transitive skill usage, and high-volume untrusted content ingestion with Bash/Write access. This looks more like a risky but plausibly legitimate research automation skill than malware.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 05:56 PM
Package URL
pkg:socket/skills-sh/SipengXie2024%2Fsuperpower-writing%2Fliterature-review%2F@54db8241ad9974e51153c86f3016a9710f817e494c00076b1a7973a7ac5dba3b
Security Audit — socket — literature-review