sci-papers-downloder

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated paper-download purpose matches most network activity, but the footprint is expanded by two disproportionate elements: a built-in commercial Scopus API key and default fallback to third-party Sci-Hub tooling auto-installed from an unrelated GitHub repo. Official OpenAlex and Unpaywall usage is coherent, yet the hidden credential model and unverified runtime dependency make the skill materially risky even without clear evidence of malware.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Jul 17, 2026, 12:20 AM
Package URL
pkg:socket/skills-sh/wentorai%2FResearch-Claw%2Fsci-papers-downloder%2F@2af1569252914b44a4339e64eade934e147bfca0172a5b0056ce85c4e0437831