sci-download

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs users (and therefore an agent) to place API keys and cookies directly into commands or the unified .env (e.g., update_config('elsevier_api_key', 'YOUR_KEY') and exporting/saving webvpn_cookies.json), which requires handling and potentially emitting secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). sci_download.py accepts attacker-controlled free-text via the CLI parameters (notably --search/query or identifiers) and then directly passes that free text into runtime network requests that parse and ingest external source responses (e.g., arxiv_download.py::search_arxiv uses session.get to ARXIV_API and parses resp.text, cnki_download.py::search_cnki POSTs keyword and parses resp.text into titles/authors, pubmed_download.py::search_pubmed uses query and parses resp.json results, semantic_scholar_download.py::search_s2 uses query and parses resp.json results).