paper-download
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing local Python scripts (
download_by_doi.pyanddownload_multiple_dois.py) to perform its primary function. It also instructs the user or agent to runpip install -e .to install the supportingauto_paper_downloadpackage in editable mode. - [EXTERNAL_DOWNLOADS]: To support its 'browser fallback' feature for certain publishers, the skill requires the installation of Playwright and the Chromium browser binary (
playwright install chromium). These are well-known developer tools. - [INDIRECT_PROMPT_INJECTION]: The skill processes DOI strings from user input or external files (
--doi-file). While this presents a theoretical surface for indirect prompt injection if the strings are not handled correctly by the underlying library, the skill implements regex-based validation (10.\d{4,9}/.+) to ensure the inputs match standard DOI formats before processing.
Audit Metadata