sci-papers-downloder

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated paper-download purpose matches most network activity, but the footprint is expanded by two disproportionate elements: a built-in commercial Scopus API key and default fallback to third-party Sci-Hub tooling auto-installed from an unrelated GitHub repo. Official OpenAlex and Unpaywall usage is coherent, yet the hidden credential model and unverified runtime dependency make the skill materially risky even without clear evidence of malware.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Jul 17, 2026, 12:20 AM
Package URL
pkg:socket/skills-sh/wentorai%2FResearch-Claw%2Fsci-papers-downloder%2F@2af1569252914b44a4339e64eade934e147bfca0172a5b0056ce85c4e0437831
Security Audit — socket — sci-papers-downloder