biorxiv-database
Audited by Socket on Mar 3, 2026
1 alert found:
SecurityBased solely on the provided skill documentation (no implementation files), this skill is coherent and proportionate for its stated purpose: searching bioRxiv and downloading PDFs. There are no instructions to exfiltrate data to suspicious domains, no credential harvesting prompts, and no download-execute chains. Primary caveat: the actual Python implementation (scripts/biorxiv_search.py, tests, and references/api_reference.md) was not provided; those files should be reviewed to confirm that HTTP endpoints used are official bioRxiv APIs, that no credentials are read and forwarded, and that downloads are performed safely. Overall risk is low but non-zero due to missing code for full verification.