paper-download

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on executing local Python scripts (download_by_doi.py and download_multiple_dois.py) to perform its primary function. It also instructs the user or agent to run pip install -e . to install the supporting auto_paper_download package in editable mode.
  • [EXTERNAL_DOWNLOADS]: To support its 'browser fallback' feature for certain publishers, the skill requires the installation of Playwright and the Chromium browser binary (playwright install chromium). These are well-known developer tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes DOI strings from user input or external files (--doi-file). While this presents a theoretical surface for indirect prompt injection if the strings are not handled correctly by the underlying library, the skill implements regex-based validation (10.\d{4,9}/.+) to ensure the inputs match standard DOI formats before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 08:20 AM