gs-export

Warn

Audited by Socket on Mar 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The approach is coherent with the stated goal of exporting Google Scholar citations to Zotero via BibTeX, combining browser automation with a local script. While there are brittleness and compliance considerations due to automated scraping and cross-origin navigation, there is no clear indication of credential theft or malicious payloads. The design is acceptable for a user-consented workflow but should be implemented with safeguards (rate limits, clear user consent prompts, error handling for PDF attachments, and configurable paths) to mitigate operational and policy risks.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 4, 2026, 03:06 AM
Package URL
pkg:socket/skills-sh/cookjohn%2Fgs-skills%2Fgs-export%2F@7ee81bfba56214e3c2240e5056128d587a8ccf2a