sci-papers-downloder

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The only suspicious item is the GitHub URL (https://github.com/Oxidane-bot/scihub-cli.git) because it points to a third‑party/personal repository used to auto-bootstrap a Sci‑Hub client (remote code install/execute risk from an unknown maintainer); the other URLs are official APIs (DOI, OpenAlex, Unpaywall, Elsevier) and are low risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill can invoke uvx at runtime to fetch and run remote code from git+https://github.com/Oxidane-bot/scihub-cli.git (used as the uvx --from fallback to install/execute scihub-cli), so a remote repository is fetched and executed during runtime.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I inspected the repository for literal high-entropy credentials. I flagged the built-in Elsevier API key because it is a 32-character hex string that looks like a real API key and is present in plaintext in code (not a placeholder). I ignored placeholders and configuration references such as UNPAYWALL_EMAIL (an env var name / placeholder) and other simple/example values and URLs, which are not secrets per the rules. No private keys, PEM blocks, or other high-entropy secrets were found.