skills/lingzhi227/agent-research-skills/citation-management/Socket

citation-management

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core citation-management behavior is coherent and the only named external service, Semantic Scholar, matches the stated purpose. However, the skill forwards a plaintext API key from a personal file into unseen local cross-skill scripts, creating avoidable credential-handling and transitive-trust risk disproportionate to a simple citation helper.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Sep 14, 2026, 02:30 PM

Package URL

pkg:socket/skills-sh/lingzhi227%2Fagent-research-skills%2Fcitation-management%2F@45b94e271194cf758f4b747deb38a2946c35397b0e9a9ded40d75c340500257b