survey

Warn

Audited by Socket on Jun 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The workflow is largely coherent for a literature-survey assistant, and its file/network actions mostly match the stated purpose. The main concern is trust: the skill relies on a likely third-party NotebookLM MCP CLI that is not clearly official Google tooling, and it ingests untrusted papers/web content while writing local outputs. This looks more like a medium-risk, externally dependent research workflow than confirmed malware.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 7, 2026, 06:17 AM
Package URL
pkg:socket/skills-sh/SNL-UCSB%2Fliterature-survey-skill%2Fsurvey%2F@18475960526bc0f3a64bced026d11ccce97a521b
Security Audit — socket — survey