skills/wanshuiyin/auto-claude-code-research-in-sleep/patent-review/Socket

patent-review

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s functional behavior mostly matches its stated patent-review purpose, but it depends on a third-party/local ARIS MCP wrapper rather than an official Codex distribution path and sends confidential patent materials through that bridge. Broad Bash(*) access is also disproportionate. This looks more like a risky external-integration skill than confirmed malware.

Confidence: 88%Severity: 78%

Audit Metadata

Analyzed At

Sep 15, 2026, 04:09 AM

Package URL

pkg:socket/skills-sh/wanshuiyin%2Fauto-claude-code-research-in-sleep%2Fpatent-review%2F@9a3bbaffc03e011e98c1efed8a426b40f40c0701c55810dd759cfc0d81eb62a3