OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides tools for retrieving academic metadata from CrossRef and Google Scholar. It is generally safe but is vulnerable to indirect prompt injection because it processes untrusted data from external web sources without sanitization. It also requires the installation of the external 'scholarly' Python package.
Detected behaviors
No alerts
No issues
14/14 files flagged
Score: 93/100 · 2 sections analyzed