sci-download
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches academic paper PDFs from reputable sources including arXiv, PubMed Central, and Semantic Scholar. It also integrates with official APIs from Elsevier, Springer Nature, and IEEE Xplore, which are well-known scientific services.
- [CREDENTIALS_UNSAFE]: Safely manages API keys and institutional session cookies by storing them in a local configuration directory (~/.aut_sci_write/). It provides CLI helpers to update these keys locally and does not exfiltrate credentials to third-party servers or use hardcoded secrets.
- [COMMAND_EXECUTION]: Provides a CLI for downloading and searching papers. The skill implements filename sanitization using regular expressions to prevent path traversal vulnerabilities when saving downloaded PDFs to the local file system.
Audit Metadata