presubmit-checks

Warn

Audited by Socket on May 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior is mostly aligned with a LaTeX presubmit skill, but risk is elevated by transitive skill dependencies with unspecified provenance and by executing local `make`, which can run arbitrary repo-defined commands. No clear credential harvesting, exfiltration endpoint, or malicious mismatch is present, so this is not malware, but it is not fully benign.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
May 6, 2026, 02:30 AM
Package URL
pkg:socket/skills-sh/yy%2Fclaude-scholar%2Fpresubmit-checks%2F@e894ca6db4708c1b60e1e2b9b1732c3e79329bcd
Security Audit — socket — presubmit-checks