sci-papers-downloder
Warn
Audited by Socket on Jul 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated paper-download purpose matches most network activity, but the footprint is expanded by two disproportionate elements: a built-in commercial Scopus API key and default fallback to third-party Sci-Hub tooling auto-installed from an unrelated GitHub repo. Official OpenAlex and Unpaywall usage is coherent, yet the hidden credential model and unverified runtime dependency make the skill materially risky even without clear evidence of malware.
Confidence: 88%Severity: 82%
Audit Metadata