paper-download
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the agent with specific command-line instructions to execute local Python scripts (
download_by_doi.py,download_multiple_dois.py). These scripts are used to orchestrate the download process. - [EXTERNAL_DOWNLOADS]: The skill's primary function is to download external content (PDF files) from academic publishers (e.g., Wiley, Elsevier, Springer) and Open Access services (e.g., OpenAlex, Crossref, Unpaywall).
- [SAFE]: The Python scripts dynamically adjust
sys.pathat runtime to ensure the internalauto_paper_downloadpackage is importable from the project root. This is a common pattern for self-contained agent skills. - [SAFE]: The skill allows the use of institutional cookies via Playwright to access paywalled content. This sensitive data is used locally by the browser automation tool for the intended task and is not exfiltrated to any third party.
Audit Metadata