Skills nature-downloader

📦

nature-downloader

Name: nature-downloader
Author: yuan1z0825

Content revision r1 High Risk 🌐 Network access🔑 Env variables📁 Filesystem access⚙️ External commands⚡ Contains scripts

Download Lawful Academic Full Text

Finding authorized full text across publishers, repositories, and institutional portals is slow. This skill routes requests and verifies downloaded academic files.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "nature-downloader" from https://skillstore.io/skills/yuan1z0825-nature-downloader.md and its manifest at https://skillstore.io/api/skills/yuan1z0825-nature-downloader/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/yuan1z0825-nature-downloader.md Signed manifest GET /api/skills/yuan1z0825-nature-downloader/manifest Signed lockfile GET /api/skills/yuan1z0825-nature-downloader/lockfile

Test it

Using "nature-downloader". Download DOI 10.xxxx/example without supporting information.

Expected outcome:

The article was downloaded from an open-access repository. The PDF signature and checksum were verified, and the manifest records the source.

Using "nature-downloader". Retrieve three confirmed articles through my library and include supporting information.

Expected outcome:

Two main PDFs were downloaded through authorized routes.
One article requires user authentication before retrying.
Supporting information was found for one completed article.

Using "nature-downloader". Find an open copy of an exact article title.

Expected outcome:

No lawful open copy was confirmed. The result records the attempted repositories and does not claim a successful download.

Security Audit

High Risk

v2 • 8/18/2026 Open versioned report

Most scanner matches are documentation, tests, fixed imports, status constants, or expected local file operations. Confirmed risks include CAPTCHA circumvention, unrestricted authenticated fetching, arbitrary credential forwarding, command-line secret exposure, and unbounded direct downloads. No prompt injection text was found. Static review was capped at 400/766 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

Files scanned

8,255

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (6)

High

SKILL.md:154-162 scripts/lib/anti-bot.mjs:426-523 scripts/lib/anti-bot.mjs:579-629 scripts/lib/anti-bot.mjs:641-773

Automated CAPTCHA Circumvention

The skill detects CAPTCHA gaps and simulates human-like drags or checkbox clicks to defeat provider verification controls.

The implementation explicitly calculates CAPTCHA gaps, generates human-like movement, retries alternate profiles, and checks whether verification passed.

High

scripts/configure_credentials.py:65-66 scripts/lib/publisher-providers.mjs:34-41

API Key Forwarded to Arbitrary Endpoint

A configured IEEE endpoint accepts any URL, and the downloader appends the stored API key before sending the request.

The endpoint is stored without hostname validation, then converted to a URL and receives the API key as a query parameter.

High

scripts/batch_download.mjs:82-105 scripts/batch_download.mjs:378-380 scripts/browser_pdf_downloader.mjs:35-42 scripts/browser_pdf_downloader.mjs:71-88

Unrestricted Authenticated URL Fetching

User-supplied URLs are fetched directly or inside an authenticated browser without scheme, hostname, or private-network restrictions.

The CLI accepts arbitrary URL strings and passes them to fetch or browser navigation without an allowlist or private-address check.

High

scripts/configure_credentials.py:57-66 scripts/configure_credentials.py:133-139

Command-Line Secret Exposure

API keys and institutional tokens can be passed as command arguments, exposing them through shell history and process listings.

The parser defines API-key, insttoken, and authtoken arguments, and cmd_set stores those argument values as credentials.

Medium

scripts/batch_download.mjs:378-380 scripts/lib/direct-download.mjs:15-25

Unbounded Direct Download Buffering

Direct downloads buffer the entire response in memory before validation and writing, with no byte limit.

The response arrayBuffer is fully materialized before content checks, and this path has no Content-Length or streamed byte cap.

Medium

scripts/batch_download.mjs:99-105 scripts/lib/cdp-utils.mjs:52-59 scripts/lib/cdp-utils.mjs:78-88

Unrestricted CDP Proxy Destination

The CLI accepts any proxy URL and sends browser-control payloads to it without requiring loopback or explicit trust.

The proxy argument is only trimmed, then receives target identifiers, URLs, selectors, and generated browser JavaScript through HTTP requests.

Capability review items (7)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/configure_credentials.py:57

Generic API/secret keys

api_key = args.api_key or os.environ.get("LIT_DL_API_KEY") or getpass.getpass("API key: ")

The API key may come from --api-key, exposing the secret through shell history and process arguments.

High

scripts/configure_credentials.py:135

Generic API/secret keys

set_cmd.add_argument("--api-key", help="Prefer the hidden prompt or LIT_DL_API_KEY over command-line

This defines a command-line API-key option, which exposes secrets to shell history and local process inspection.

High

scripts/batch_download.mjs:379

Fetch API call

const response = await fetch(pdfUrl, { headers: { Accept: "application/pdf, text/html, application/x

This fetches the user-supplied --pdf-url without protocol, hostname, or private-network validation.

High

scripts/browser_pdf_downloader.mjs:88

Fetch API call

const r = await fetch(${fetchTarget}, { credentials: "include" });

This fetches a supplied URL with credentials inside an authenticated browser context, creating an authenticated request and local-network access risk.

High

scripts/lib/anti-bot.mjs:651

Fetch API call

const js = `fetch('http://localhost:0/cdp',{

This request carries raw CDP mouse commands used to imitate human input and defeat verification controls.

High

scripts/lib/pdf-utils.mjs:56

Fetch API call

const r=await fetch(${JSON.stringify(url)},{credentials:'include'});

This downloads a selected URL with browser credentials and transfers the response from the authenticated page into a local file.

Medium

scripts/lib/cdp-utils.mjs:53

Fetch API call

const response = await fetch(url, {

This generic fetch sends browser-control requests to a configurable proxy URL without restricting the destination to a trusted local service.

Risk Factors

🌐 Network access (50)

🔑 Env variables (50)

data/publishers.json:7 data/publishers.json:14 data/publishers.json:21 scripts/batch_download.mjs:685 scripts/batch_download.mjs:685 scripts/configure_credentials.py:20 scripts/configure_credentials.py:57 scripts/configure_credentials.py:55 scripts/configure_credentials.py:57 scripts/configure_credentials.py:58 scripts/configure_credentials.py:60 scripts/configure_credentials.py:70 scripts/configure_credentials.py:90 scripts/configure_credentials.py:98 scripts/configure_credentials.py:106 scripts/configure_credentials.py:135 scripts/lib/credentials.mjs:8 scripts/lib/credentials.mjs:13 scripts/lib/credentials.mjs:39 scripts/lib/credentials.mjs:51 scripts/lib/credentials.mjs:58 scripts/lib/credentials.mjs:70 scripts/lib/credentials.mjs:44 scripts/lib/manifest.mjs:4 scripts/lib/manifest.mjs:19 scripts/lib/publisher-providers.mjs:23 scripts/lib/publisher-providers.mjs:31 scripts/lib/publisher-providers.mjs:40 scripts/lib/publisher-providers.mjs:62 scripts/lib/routing.mjs:20 scripts/lib/school-config.mjs:7 scripts/lib/school-config.mjs:12 scripts/lib/school-config.mjs:32 scripts/lib/settings.mjs:5 scripts/lib/settings.mjs:10 src/config.py:22 src/config.py:53 src/config.py:55 src/config.py:60 src/config.py:106 tests/python/test_config_credentials.py:19 tests/python/test_config_credentials.py:36 tests/python/test_config_wizard.py:68 tests/python/test_config_wizard.py:69 tests/python/test_config_wizard.py:89 tests/python/test_config_wizard.py:90 tests/python/test_config_wizard.py:107 tests/python/test_config_wizard.py:122 tests/python/test_config_wizard.py:140 tests/python/test_config_wizard.py:158

📁 Filesystem access (50)

⚙️ External commands (50)

⚡ Contains scripts (8)

scripts/lib/cdp-utils.mjs:12 src/wizard.py:26-33 tests/python/test_config_wizard.py:20 tests/python/test_config_wizard.py:35 tests/python/test_config_wizard.py:51 tests/python/test_config_wizard.py:72 tests/python/test_config_wizard.py:73 tests/python/test_config_wizard.py:95

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/yuan1z0825-nature-downloader/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/yuan1z0825-nature-downloader/security.svg)](https://skillstore.io/skills/yuan1z0825-nature-downloader?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/yuan1z0825-nature-downloader?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yuan1z0825-nature-downloader/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/yuan1z0825-nature-downloader.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

yuan1z0825. (2026). nature-downloader security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/yuan1z0825-nature-downloader/audits/2

BibTeX citation

@techreport{yuan1z0825-yuan1z0825-nature-downloader-2026,
  author = {yuan1z0825},
  title = {nature-downloader security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/yuan1z0825-nature-downloader/audits/2},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nature-downloader security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
  - name: "yuan1z0825"
date-released: "2026-08-18"
url: "https://skillstore.io/skills/yuan1z0825-nature-downloader/audits/2"
identifiers:
  - type: other
    value: "skillstore:yuan1z0825-nature-downloader:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Retrieve a Known Article

Download one article by DOI or exact title and verify the resulting file.

Collect a Reading List

Process a confirmed DOI list and record each article's route, status, and integrity details.

Access Chinese Literature

Use an authenticated institutional browser session to retrieve authorized CNKI content.

Try These Prompts

Download One Paper

Download the article with DOI [DOI]. Do not download supporting information. Save it in [folder] and report the verified format.

Find an Open Copy

Find a lawful open-access copy of [title]. Download the main article only and explain which source provided it.

Process a DOI List

Process these confirmed DOIs: [list]. Ask once about supporting information, use lawful routes, and summarize every result.

Use Institutional Access

Use my authenticated Chrome session for [articles]. Stop for identity checks, avoid automatic CAPTCHA solving, and produce a verified manifest.

Best Practices

Provide exact titles, DOIs, or a confirmed paper list before starting downloads.
Use hidden input or standard input for API keys, and review the destination folder first.
Confirm supporting-information preferences once, then inspect the manifest and downloaded file signatures.

Avoid

Do not request unlimited topic downloads or entire journal issues.
Do not paste institutional passwords, session tokens, cookies, or one-time codes into chat.
Do not use automated CAPTCHA solving or access content beyond the user's authorization.

Frequently Asked Questions

Does this skill bypass paywalls?

No. It uses lawful open-access sources, configured publisher APIs, or the user's authorized institutional access.

Which identifiers can I provide?

You can provide DOIs, exact titles, PMIDs, article URLs, or a confirmed list.

Where are publisher credentials stored?

They are stored locally in the configured credentials file with restricted permissions.

Can it download supporting information?

Yes. The skill requires an explicit supporting-information choice before creating download output.

Why is Chrome remote debugging required?

Institutional routes need access to the browser session where the user already authenticated.

What happens when access fails?

The skill records a typed failure, preserves attempted routes, and identifies any required user action.

Developer Details

Author

yuan1z0825

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/yuan1z0825/nature-skills/tree/c171989db699bd601d4373912b3fb8db96ecc95b/skills/nature-downloader

Ref

e22f0e5c175a84e01097fa734ec2a74420c14771

Maintenance freshness

8/19/2026

Usage

0 downloads · 0 views

File structure

📄 .gitattributes

📄 .gitignore

📁 agents/

📄 openai.yaml

📁 assets/

📄 banner.jpg

📁 data/

📄 publishers.json

📄 school.schema.json

📄 schools.yaml

📁 docs/

📄 nature-downloader-reference-research-2026-07-15.md

📁 superpowers/

📁 plans/

📄 2026-06-21-nature-downloader-merge.md

📁 examples/

📄 carsi-retry-template.tsv

📄 manifest-template.tsv

📄 publisher-verification-template.tsv

📄 LICENSE

📄 manifest.yaml

📄 README_EN.md

📄 README.md

📁 references/

📄 delivery-verification-and-failures.md

📄 institutional-browser-workflow.md

📄 requirements.txt

📁 scripts/

📄 batch_download.mjs

📄 browser_pdf_downloader.mjs

📄 cdp_open_url.mjs

📄 configure_credentials.py

📄 configure_school.py

📄 extract_pdf_text.py

📁 lib/

📄 anti-bot.mjs

📄 cdp-utils.mjs

📄 cnki.mjs

📄 credentials.mjs

📄 direct-download.mjs

📄 manifest.mjs

📄 metadata.mjs

📄 open-access-provider.mjs

📄 open-access.mjs

📄 pdf-utils.mjs

📄 provider-registry.mjs

📄 provider-utils.mjs

📄 publisher-providers.mjs

📄 routing.mjs

📄 school-config.mjs

📄 settings.mjs

📄 status-codes.mjs

📄 wos-supporting-information.mjs

📄 retry_elsevier_api.mjs

📄 SKILL.md

📁 src/

📄 config.py

📄 health_check.py

📄 schools_loader.py

📄 validators.py

📄 wizard.py

📁 tests/

📁 python/

📄 test_config_credentials.py

📄 test_config_wizard.py

📁 unit/

📄 batch-cli.test.mjs

📄 cnki.test.mjs

📄 credentials.test.mjs

📄 generic-package.test.mjs

📄 manifest.test.mjs

📄 metadata.test.mjs

📄 open-access-provider.test.mjs

📄 open-access.test.mjs

📄 provider-utils.test.mjs

📄 publisher-providers.test.mjs

📄 routing.test.mjs

📄 school-config.test.mjs

📄 status-codes.test.mjs

Conduct Systematic Literature Reviews

by davila7

Researchers need reproducible reviews that track searches, criteria, synthesis, and citations. This skill guides searches, screening, citation checks, and formatted review outputs.

Research & Learning View

nature-downloader

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (6)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

Retrieve a Known Article

Collect a Reading List

Access Chinese Literature

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from yuan1z0825

nature-figure

nature-paper-to-patent

nature-paper-card

nature-paper2ppt

nature-writing

nature-reader

Related Skills

research-lookup

openalex-database

semantic-scholar-library-feed

venue-templates

diffdock

literature-review