q-scholar

Warn

Audited by Socket on Feb 27, 2026

1 alert found:

Security
SecurityMEDIUM
q-exploratory-analysis/SKILL.md

The skill description and workflow are internally coherent and proportionate to the intended purpose of performing automated, interview-guided EDA with structured CSV outputs and narrative summaries. There are no clear indicators of malicious behavior, credential harvesting, or suspicious external data flows based on the provided fragment. Treat as benign with standard supply-chain caution around executing local pre-built scripts (ensure integrity of run_eda.py and the summary_template.md).

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 27, 2026, 07:38 PM
Package URL
pkg:socket/skills-sh/tyrealq%2Fq-skills%2Fq-scholar%2F@159086c5c356d80af020327b2353ad37e75c360c