OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
This skill enables scientific paper searches via the BGPT MCP server. It requires installing third-party packages from the official NPM registry and retrieves study data from an external database, which presents a surface for indirect prompt injection from paper content.
Detected behaviors
No alerts
2 issues
Score: 93/100 · 2 sections analyzed