skills/wenyuchiou/research-hub/zotero-library-curator/Socket

zotero-library-curator

Warn

Audited by Socket on Aug 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent and mostly read-only, but the skill’s footprint includes transitive installation of another skill plus unpinned raw-GitHub/git-clone distribution paths. No clear credential harvesting or exfiltration appears in this skill, yet trust is materially dependent on external apply-capable tools outside this file.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Aug 8, 2026, 12:40 PM

Package URL

pkg:socket/skills-sh/wenyuchiou%2Fresearch-hub%2Fzotero-library-curator%2F@83f9445591c6391a233de212864ac0d31e16185f1a3bd9130ed47d931e305a08