skills/jiahao-shao1/sjh-skills/scholar-agent/Socket

scholar-agent

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The overall workflow matches the stated paper-discovery purpose, but trust and credential boundaries are weak. The main concern is supply-chain and credential-handling risk from an unverified Anthropic-branded npm package plus a third-party notebooklm CLI that uses unofficial APIs and receives authenticated access.

Confidence: 80%Severity: 68%

Audit Metadata

Analyzed At

Mar 31, 2026, 09:51 AM

Package URL

pkg:socket/skills-sh/jiahao-shao1%2Fsjh-skills%2Fscholar-agent%2F@ce07b47be57a2f46235f89c3224ec8de17b5b0d6