labarchive-integration

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core API usage and official LabArchives endpoints align with the stated ELN integration purpose, but the skill undermines that trust by directing users to install an unofficial personal GitHub wrapper that would likely receive LabArchives credentials. The command-line password example further weakens credential safety. No confirmed exfiltration or malware is shown, but the third-party install path is high risk and not well justified for this skill.

Confidence: 91%Severity: 80%
Audit Metadata
Analyzed At
Oct 12, 2026, 05:25 AM
Package URL
pkg:socket/skills-sh/wu-yc%2Flabclaw%2Flabarchive-integration%2F@be81f8ca09f95bac96faba95218e7d2bf9a6d8045ecf2b94fe4a5237efdf5297