The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill extracts and manages sensitive browser cookies. The scripts/refresh-auth-from-dia.sh script uses the Chrome DevTools Protocol (CDP) to programmatically extract session cookies (e.g., plack_session for Paperpile) from a running browser. Additionally, scripts/resolve_pdf.py snapshots these cookies to ~/.claude-work/skills/paperpile/cookies/ and hydrates them back into the browser context.
[PERSISTENCE]: The skill establishes persistence to maintain institutional access sessions. The references/proxy_urls.md file provides instructions to install a cron job using crontab for a "warmup" task and mentions using launchd to maintain a persistent Chrome CDP instance.
[DYNAMIC_EXECUTION]: Arbitrary code is executed dynamically across several scripts. scripts/refresh-auth-from-dia.sh runs an inline Node.js script, while scripts/warmup.sh executes inline Bun code to manipulate the browser via CDP. scripts/resolve_pdf.py uses Runtime.evaluate to execute JavaScript for scraping data from publisher websites, and scripts/poll_attachment.sh runs inline Python code.
[COMMAND_EXECUTION]: The skill invokes multiple local binaries and shell commands to perform its tasks. It relies on the presence of a paperpile binary at ~/.local/bin/paperpile and uses subprocess.run to call curl, scholar, and other system tools.
[DATA_EXFILTRATION]: The skill's ability to extract authentication cookies and communicate with external academic publisher APIs and the Paperpile service could be leveraged for unauthorized data exfiltration if bibliographic inputs or resolver URLs are maliciously crafted.

paperpile