research-paper-downloader

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads research papers from well-known and reputable scientific databases such as Semantic Scholar, arXiv, Europe PMC, and OpenAlex. All network communication targets established domains listed in the configuration file.
  • [DATA_EXFILTRATION]: Secure file operations are enforced by restricting PDF downloads to the designated output directory (~/Downloads/ResearchPapers). The implementation uses absolute path resolution to prevent path traversal attacks and ensure no unauthorized directory access occurs.
  • [COMMAND_EXECUTION]: The downloader is implemented using standard Python libraries for network requests and file handling. It does not utilize subprocesses, system calls, or functions for executing arbitrary shell commands or dynamic scripts.
  • [PROMPT_INJECTION]: The skill handles untrusted user input such as DOIs and arXiv IDs by performing input cleaning and validation. It additionally sanitizes metadata used for filenames to prevent injection and verifies the binary header of downloaded files to ensure they are valid PDFs before saving.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 10:43 AM
Security Audit — agent-trust-hub — research-paper-downloader