nature-downloader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/batch_download.mjs, when --topic is provided it uses Web of Science to build a query and then executes page-evaluation JS via evalJs/proxyGet that reads outsider-authored free text from the search UI (DOM/record pages) to extract record links and DOIs, e.g., wosRecordUrls() sets the topic text into the search box and later calls evalJs(...collect shadow DOM full-record links ...) and doiFromRecord() reads document.body.innerText/meta tags to extract a DOI.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The agent plan (docs/superpowers/plans/2026-06-21-nature-downloader-merge.md) explicitly instructs fetching the upstream GitHub repository "Flyme886/nature-downloader" at runtime and then invoking its Node download path, which would pull and execute remote code (Flyme886/nature-downloader) as a required dependency.