scientific-schematics

Fail

Audited by Socket on Apr 16, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: the skill is broadly consistent with scientific diagram generation, but its actual data flow depends on OpenRouter as a third-party gateway while presenting Google/Nano Banana/Gemini branding. Credential scope is limited and no malicious installer or overt exfiltration behavior is shown, yet the intermediary routing and endpoint ambiguity make it higher risk than a direct official API integration.

Confidence: 85%Severity: 54%
Audit Metadata
Analyzed At
Apr 16, 2026, 08:25 AM
Package URL
pkg:socket/skills-sh/Zaoqu-Liu%2FScienceClaw%2Fscientific-schematics%2F@5710af5d436ae613cfbf93ed156c493a107180d7