sci-download

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches academic paper PDFs from reputable sources including arXiv, PubMed Central, and Semantic Scholar. It also integrates with official APIs from Elsevier, Springer Nature, and IEEE Xplore, which are well-known scientific services.
  • [CREDENTIALS_UNSAFE]: Safely manages API keys and institutional session cookies by storing them in a local configuration directory (~/.aut_sci_write/). It provides CLI helpers to update these keys locally and does not exfiltrate credentials to third-party servers or use hardcoded secrets.
  • [COMMAND_EXECUTION]: Provides a CLI for downloading and searching papers. The skill implements filename sanitization using regular expressions to prevent path traversal vulnerabilities when saving downloaded PDFs to the local file system.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 02:13 PM
Security Audit — agent-trust-hub — sci-download